Commit Graph

19 Commits

Author SHA1 Message Date
Markus Lehtonen f29f01f9f0
docs: fix broken example command 2024-01-11 09:01:43 +02:00
Swapnil 51d5c9f959 doc_fix: fixing update cluster command 2022-11-02 11:49:11 +05:30
Ole Markus With 420498174a Update the security docs 2022-03-26 10:11:54 +01:00
John Gardiner Myers 21f25b5f5f Change title of iam_roles.md to be specific to instance IAM roles 2021-11-26 21:36:46 -08:00
John Pugliesi 8ddf4e1ac3
Update security.md 2021-02-25 11:21:30 -08:00
Ciprian Hacman 6a4d86baf9 Rename Kops to kOps in the docs 2020-10-29 19:39:50 +02:00
John Gardiner Myers a3e7ca2469 Disable static tokens by default as of Kubernetes 1.18 2020-06-01 15:12:09 -07:00
John Gardiner Myers 2d98e5609c Remove/fix more CoreOS references 2020-05-22 20:54:41 -07:00
AdamDang 921c7f2ca3
Update security.md 2018-10-14 12:03:38 +08:00
Rohith 9873fc1be5 Requested Changes
- fixed the various issues highlighted in https://github.com/kubernetes/kops/pull/3125
- changed the docuementation to make more sense
- changed the logic of the UseSecureKubelet to return early
2017-08-08 13:47:08 +01:00
Rohith 2fb60b9b3d Kubelet API Certificate
A while back options to permit secure kube-apiserver to kubelet api was https://github.com/kubernetes/kops/pull/2831 using the server.cert and server.key as testing grouns. This PR formalizes the options and generates a client certificate on their behalf (note, the server{.cert,key} can no longer be used post 1.7 as the certificate usage is checked i.e. it's not using a client cert). The users now only need to add anonymousAuth: false to enable secure api to kubelet. I'd like to make this default to all new builds i'm not sure where to place it.

- updated the security.md to reflect the changes
- issue a new client kubelet-api certificate used to secure authorize comms between api and kubelet
- fixed any formatting issues i came across on the journey
2017-08-08 01:11:09 +01:00
Blake 4f95fe473f Incorporate review feedback
- Rename to just DockerConfig / dockerconfig everywhere for consistency
- Check if the config is valid JSON
- Update docs
2017-08-01 13:15:19 -07:00
Blake 4d9c69c167 Add documentation and update text fixture 2017-07-29 13:29:28 -07:00
Justin Santa Barbara 4f88a6463f Merge pull request #2526 from dolftax/coreos-ssh-doc
[Fixes #2506] Adds CoreOS SSH username as `core` in docs
2017-05-10 08:55:59 -07:00
Seth Miller 569e6bbf25 Updated security docs to display API secret token correctly
Fixes #2234
2017-05-08 15:58:37 -05:00
Jaipradeesh Janarthanan 7b1fa77e89
[Fixes #2506] Adds CoreOS SSH username as `core` in docs
Signed-off-by: Jaipradeesh Janarthanan <jaipradeesh@gmail.com>
2017-05-08 16:27:42 +05:30
Jakub Paweł Głazik 55f4beb2c5 Update docs regarding IAM roles 2017-02-12 18:25:48 +01:00
Bjarke Vad Andersen 52c255c908 Use correct `kops rolling-update` command 2016-11-09 10:02:47 +01:00
Justin Santa Barbara 399e622f64 Start work on documenting authentication/security
In particular SSH

Issue #166
Issue #263
Issue #236
2016-08-14 22:30:49 -04:00