Download Kubernetes的说明

kuberctl用于在执行kubernates命令。

其他组件可以在容器中部署。

Kubernetes ships binaries for each component as well as a standard set of client applications to bootstrap or interact with a cluster. Components like the API server are capable of running within container images inside of a cluster. Kubernetes 为每个组件提供二进制文件以及一组标准的客户端应用程序来引导或与集群交互。 API 服务器等组件能够在集群内的容器镜像中运行。 Those components are also shipped in container images as part of the official release process. All binaries as well as container images are available for multiple operating systems as well as hardware architectures. 作为官方发布过程的一部分，这些组件也以容器镜像的形式发布。所有二进制文件和容器镜像都可用于多个操作系统和硬件架构。

Container Images 容器镜像

All Kubernetes container images are deployed to the registry.k8s.io container image registry. 所有 Kubernetes 容器镜像都部署到 registry.k8s.io 容器镜像注册表。

FEATURE STATE: Kubernetes v1.24 [alpha] 特征状态： Kubernetes v1.24 [alpha]

For Kubernetes v1.27, the following container images are signed using cosign signatures: 对于 Kubernetes v1.27，以下容器镜像使用 cosign 签名进行签名：

All container images are available for multiple architectures, whereas the container runtime should choose the correct one based on the underlying platform. It is also possible to pull a dedicated architecture by suffixing the container image name, for example registry.k8s.io/kube-apiserver-arm64:v1.27.1. All those derivations are signed in the same way as the multi-architecture manifest lists. 所有容器镜像都可用于多种架构，而容器运行时应根据底层平台选择正确的镜像。也可以通过为容器镜像名称添加后缀来拉取专用架构，例如 registry.k8s.io/kube-apiserver-arm64:v1.27.1 。所有这些派生都以与多体系结构清单列表相同的方式进行签名。

The Kubernetes project publishes a list of signed Kubernetes container images in SPDX 2.3 format. You can fetch that list using: Kubernetes 项目以 SPDX 2.3 格式发布了已签名的 Kubernetes 容器镜像列表。您可以使用以下方法获取该列表：

curl -Ls "https://sbom.k8s.io/$(curl -Ls https://dl.k8s.io/release/stable.txt)/release" | grep "SPDXID: SPDXRef-Package-registry.k8s.io" |  grep -v sha256 | cut -d- -f3- | sed 's/-/\//' | sed 's/-v1/:v1/'

For Kubernetes v1.27, the only kind of code artifact that you can verify integrity for is a container image, using the experimental signing support. 对于 Kubernetes v1.27，唯一可以验证完整性的代码工件是容器映像，使用实验性签名支持。

To manually verify signed container images of Kubernetes core components, refer to Verify Signed Container Images. 手动验证 Kubernetes 核心组件的签名容器镜像，请参考验证签名容器镜像。

Binaries

Find links to download Kubernetes components (and their checksums) in the CHANGELOG files. 在 CHANGELOG 文件中找到下载 Kubernetes 组件（及其校验和）的链接。

Alternately, use downloadkubernetes.com to filter by version and architecture. 或者，使用 downloadkubernetes.com 按版本和体系结构进行过滤。

kubectl

The Kubernetes command-line tool, kubectl, allows you to run commands against Kubernetes clusters. Kubernetes 命令行工具 kubectl 允许您针对 Kubernetes 集群运行命令。

You can use kubectl to deploy applications, inspect and manage cluster resources, and view logs. For more information including a complete list of kubectl operations, see the kubectl reference documentation. 您可以使用 kubectl 部署应用程序、检查和管理集群资源以及查看日志。有关包括 kubectl 操作的完整列表在内的更多信息，请参阅 kubectl 参考文档。

kubectl is installable on a variety of Linux platforms, macOS and Windows. Find your preferred operating system below. kubectl 可安装在各种 Linux 平台、macOS 和 Windows 上。在下方找到您的首选操作系统。

• Install kubectl on Linux 在 Linux 上安装 kubectl
• Install kubectl on macOS 在 macOS 上安装 kubectl
• Install kubectl on Windows 在 Windows 上安装 kubectl