resources:
  - nodes/status
  verbs:
  - get
  - list
  - update
  - delete
  - patch

- apiGroups:
  - ""
  resources:
  - pods
  verbs:
  - list
  - delete
- apiGroups:
  - ""
  resources:
  - pods/status
  verbs:
  - list

          - valuesValue
        matchLabels:
          matchLabelsKey: matchLabelsValue
      target:
        apiVersion: apiVersionValue
        kind: kindValue
        name: nameValue
      targetValue: "0"
    pods:
      metricName: metricNameValue
      selector:
        matchExpressions:
        - key: keyValue
          operator: operatorValue
          values:
          - valuesValue
        matchLabels:

                "values": [
                  "valuesValue"
                ]
              }
            ]
          },
          "averageValue": "0"
        },
        "pods": {
          "metricName": "metricNameValue",
          "targetAverageValue": "0",
          "selector": {
            "matchLabels": {
              "matchLabelsKey": "matchLabelsValue"
            },

          - valuesValue
        matchLabels:
          matchLabelsKey: matchLabelsValue
      target:
        apiVersion: apiVersionValue
        kind: kindValue
        name: nameValue
      targetValue: "0"
    pods:
      metricName: metricNameValue
      selector:
        matchExpressions:
        - key: keyValue
          operator: operatorValue
          values:
          - valuesValue
        matchLabels:

kind: bug-fix
area: networking
issue:
- 29412
releaseNotes:
- |
  **Improved** the `istioctl x workload` command to configure VMs to disable inbound `iptables` capture

		validStorageVersion(),
		[]labels.Set{},
		[]labels.Set{
			{"hoo": "bar"},
		},
		[]fields.Set{
			{"metadata.name": "core.pods"},
		},
		[]fields.Set{
			{"metadata.name": "nomatch"},
		},
	)
}

func name(i int) string {
	return fmt.Sprintf("core.pods%d", i)
}

func validStorageVersion() *apiserverinternal.StorageVersion {
	ssv1 := apiserverinternal.ServerStorageVersion{

							Default:     "",
							Type:        []string{"string"},
							Format:      "",

	// A guaranteed pod using 100% of memory can have an OOM score of 10. Ensure
	// that burstable pods have a higher OOM score adjustment.
	if int(oomScoreAdjust) < (1000 + guaranteedOOMScoreAdj) {
		return (1000 + guaranteedOOMScoreAdj)
	}
	// Give burstable pods a higher chance of survival over besteffort pods.
	if int(oomScoreAdjust) == besteffortOOMScoreAdj {
		return int(oomScoreAdjust - 1)
	}
	return int(oomScoreAdjust)

func PodRunning(event watch.Event) (bool, error) {
	switch event.Type {
	case watch.Deleted:
		return false, errors.NewNotFound(schema.GroupResource{Resource: "pods"}, "")
	}
	switch t := event.Object.(type) {
	case *v1.Pod:
		switch t.Status.Phase {
		case v1.PodRunning:
			return true, nil
		case v1.PodFailed, v1.PodSucceeded:
			return false, ErrPodCompleted
		}
	}

# kube-dns

`kube-dns` schedules DNS Pods and Service on the cluster, other pods in cluster
can use the DNS Service’s IP to resolve DNS names.

* [Administrators guide](http://kubernetes.io/docs/admin/dns/)
* [Code repository](http://www.github.com/kubernetes/dns)

## Manually scale kube-dns Deployment

kube-dns creates only one DNS Pod by default. If
[dns-horizontal-autoscaler](../../dns-horizontal-autoscaler/)