Commit Graph

364 Commits

Author SHA1 Message Date
Jordan Liggitt 3d15ef3810 Stop recommending people scrape auto-generated service account tokens 2022-02-23 13:28:02 -05:00
Mark Rossetti f217a5415e Moving windows resource management to seperate page
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2022-02-22 13:17:04 -08:00
Kubernetes Prow Robot a3b30be299
Merge pull request #31558 from chrismetz09/metzResourceMetrics
update resource metrics pipeline section
2022-02-21 04:38:11 -08:00
chrismetz09 10e7039a69 update resource metrics pipeline section 2022-02-11 07:09:01 -08:00
Shivam Singhal d722e64d1d Fix link of XFS project quotas in manage-resources-containers 2022-02-11 15:47:38 +02:00
d3vus 42e88a361c Updated managed-resource-containers.md 2022-01-13 13:05:17 +05:30
glongzh b56ba23397
Update content/en/docs/concepts/configuration/configmap.md
Co-authored-by: divya-mohan0209 <divya.mohan0209@gmail.com>
2021-12-23 16:05:25 +08:00
glongzh 19ab41d4b8
Update configmap docs with subpath limitation
This note should be added to avoid confusion just as [Secrets](/docs/concepts//configuration/secret#mounted-secrets-are-updated-automatically)
2021-12-23 10:23:23 +08:00
Kubernetes Prow Robot 2521d09aff
Merge pull request #29227 from sftim/20210804_tweak_resource_limiting_troubleshooting_advice
Tweak advice about managing resources for containers
2021-12-21 17:13:36 -08:00
Qiming Teng f733bbb956 Remove kube-scheduler-policy contents 2021-12-18 09:43:50 +08:00
Tim Bannister 367faca49f Tweak advice about managing resources for containers
Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
2021-12-08 21:40:16 +00:00
Jason Kim (Jun Chul Kim) add3441154 Update manage-resources-containers.md
Warn people about mistaking "M" suffix for "m" when setting resource limits #30499
2021-11-24 23:11:27 +09:00
sandipanpanda 7a513e6dee
Fix broken anchor link of #type-nodeport in service.md (#30388)
* Fix broken anchor link of #type-nodeport in service.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in overview.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in ingress.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in troubleshooting-kubeadm.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in connecting-frontend-backend.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in source-ip.md
2021-11-12 08:02:28 -08:00
Kubernetes Prow Robot 53f7612552
Merge pull request #30186 from sandersaares/request-is-not-a-guarantee
A CPU request does not result in a guarantee
2021-11-09 23:15:26 -08:00
Vivek Koppuru 4f9f1dccfc Fix wording of basic auth secret doc to keep it consistent with validation 2021-11-05 18:18:03 +05:30
Sander Saares 667d338866 Adjust wording based on review comment 2021-10-22 16:41:21 +03:00
Sander Saares 3f5ab3f982 A CPU request does not result in a guarantee
It is merely a pod placement constraint but the phrasing leads readers to  the incorrect understanding that some actual CPU time is guaranteed/reserved. Re-phrase to make it clear this is nothing more than a request.
2021-10-22 09:02:42 +03:00
Kubernetes Prow Robot 92d8d1e966
Merge pull request #28733 from Kartik494/dockerserver
Add docker server registry
2021-09-30 22:03:21 -07:00
Kubernetes Prow Robot 0cf63c805b
Merge pull request #29345 from sftim/20210812_migrate_image_good_practice_images_concept
Migrate good practice for container images into Containers section
2021-08-30 07:20:54 -07:00
Kubernetes Prow Robot dc262ad58b
Merge pull request #27905 from jai/jai/fix-20134
docs(manage-resources-containers): add volume and volumeMount for ephemeral storage
2021-08-24 10:41:14 -07:00
Tim Bannister fd19a0c145 Migrate good practice for container images into Containers section 2021-08-24 10:47:18 +01:00
Kubernetes Prow Robot 87235b508d
Merge pull request #29311 from mengjiao-liu/update-githubbranch-param
Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value
2021-08-16 06:03:18 -07:00
Kubernetes Prow Robot dd14c2208c
Merge pull request #29247 from sanmai/patch-1
Update Managing Resources to mention the measure of CPU time
2021-08-11 03:34:46 -07:00
Alexey Kopytko 9ca04a1014
Update Managing Resources to mention the measure of CPU time 2021-08-11 18:30:33 +09:00
Kubernetes Prow Robot 7331e54c09
Merge pull request #28623 from chenxuc/staticPod
static pod not support configmap or secret
2021-08-10 03:23:17 -07:00
Mengjiao Liu f945335af6 Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value 2021-08-10 18:03:21 +08:00
Tim Bannister 97c35ce770 Update links from Secret concept to relevant API reference 2021-08-04 22:35:56 +01:00
Kubernetes Prow Robot 8ceaf4daef
Merge pull request #29066 from rahdeck/patch-1
Lowercase one of the memory suffixes
2021-07-27 19:53:34 -07:00
chenxuc 8c9c9c543c static pod not support configmap or secret 2021-07-27 14:51:45 +08:00
Tim Bannister 7a8389ccc2 Revise wording for Secret concept 2021-07-24 02:23:27 +01:00
rahdeck c80e5640da
Lowercase one of the memory suffixes
Upper case 'K' suffix for memory results in an invalid request.
2021-07-22 10:43:37 +10:00
kartik494 cb712cdcd1 Add commit for hostname 2021-07-14 23:52:22 +05:30
Kubernetes Prow Robot 8e737b26da
Merge pull request #27933 from toshokan/secrets-typo
[en] Fix secret -> secrets in titles
2021-07-10 18:34:46 -07:00
Yuval Avrahami 338139971f Remove an outdated risk regarding secrets 2021-07-05 20:42:08 +03:00
kartik494 c1dc2b074f Add docker server registry 2021-07-01 13:05:52 +05:30
Grace Nguyen 04d0c72c32
Kube config warnings for code execution (#28248)
* Update configure-access-multiple-clusters.md

* Rewording kubeconfig warning

* Tabitha's suggestion

Co-authored-by: Tabitha Sable <51767484+tabbysable@users.noreply.github.com>

* Re-order sentences

* Copy update

Co-authored-by: Tabitha Sable <51767484+tabbysable@users.noreply.github.com>
2021-06-20 07:12:51 -07:00
Qiming Teng e9703497a1 Remove exec permission on markdown files
For some unknown reasons, we have got many markdown files with exec
permission. That is weird and risky.
2021-06-16 17:57:00 +08:00
Niko Felger 5bb726ba16
Fix typo 2021-05-18 10:29:09 +02:00
Zulai Wang 1753d09792 Fix typo in secret.md 2021-05-16 15:15:29 +08:00
Shannon Kularathna 8b0f2648e2 Move Priority and Preemption to Scheduling section 2021-05-11 15:10:02 +00:00
toshokan c860159ea8
[en] Fix secret -> secrets in titles 2021-05-10 22:07:40 -04:00
Jai Govindani 2c82e7d6cf
docs(manage-resources-containers): add volume and volumeMount for ephemeral storage
Signed-off-by: Jai Govindani <jai@honestbank.com>
2021-05-07 19:34:43 +07:00
Shannon Kularathna 979ffdf355 Clarify use of QoS in eviction ranking 2021-04-27 21:03:51 +00:00
Kubernetes Prow Robot d1e6a6fd24
Merge pull request #26605 from tengqm/admission-config-ref
Add WebhookAdmission reference
2021-04-14 01:30:42 -07:00
Qiming Teng 108149fa2f Add WebhookAdmission reference
This is a reference for WebhookAdmission config generated from kubernetes-sigs/reference-docs/genref tool.
More specifically, it is generated using the following command:

```shell
./genref -include apiserver-webhookadmission
```
2021-04-07 09:13:47 +08:00
Tim Bannister 965aa51daf Merge master into dev-1.21 to keep in sync, plus latest API reference
This sync merge includes API reference updates.
2021-04-06 21:38:24 +01:00
Qiming Teng 4d20ce5b29 Add reference doc for kube-scheduler policy
This is a reference for kube-scheduler policy config generated from
kubernetes-sigs/reference-docs/genref tool.
More specifically, it is generated using the following command:

```
./genref --include kube-scheduler-policy-config
```
2021-04-02 10:57:58 +08:00
Qiming Teng 79845b0c4a Add kubelet config reference
This is a reference for kubelet config generated from
github.com/tengqm/genref tool using the following command:

./genref -include kubelet-config
2021-04-01 21:53:14 +08:00
Victor Palade ca046d9b1f Merge master into dev-1.21 to keep in sync 2021-03-26 21:29:52 +01:00
Rey Lejano 9d56683e8b Merge master into dev-1.21 to keep in sync - SIG-Release 1.21 Docs team 3/17/21
Fixed merge conflict with /docs/reference/command-line-tools-reference/kube-apiserver.md and preferred master
2021-03-17 21:29:04 -07:00
Karen Bradshaw 3ff5ec1eff clean up use of word: just 2021-03-17 19:57:40 -04:00
Tobias 69172dfd8e
clarify: add that binaryData is base64-encoded 2021-03-15 15:38:29 +01:00
ChandaniM123 f4dee4c08b Merge remote-tracking branch 'upstream/master' into dev-1.21 2021-03-12 18:13:48 -05:00
Kubernetes Prow Robot 6d15d0d011
Merge pull request #26661 from adrianludwin/image-pull-policy
Better document default imagePullPolicy behaviour
2021-03-08 00:15:45 -08:00
Victor Palade 70096affc5 Merge remote-tracking branch 'upstream/master' into dev-1.21 2021-03-05 17:05:24 +01:00
Adrian Ludwin d2239f3d7a Better document default imagePullPolicy behaviour
The `imagePullPolicy` field is set automatically based on the image tag
if it's initially omitted, but it is not updated if the image tag later
changes. This can lead to [confusing
behaviour](https://itnext.io/defaults-are-hard-kubernetes-deployment-edition-3b11095792f2).
This change attempts to warn users of this potential pitfall.
2021-03-01 14:40:03 -05:00
Kubernetes Prow Robot 7d051f9a09
Merge pull request #25459 from amyXia1994/patch-1
Update secret.md
2021-02-27 17:52:38 -08:00
Kubernetes Prow Robot 12dd36ef3d
Merge pull request #26488 from ChandaniM123/merged-master-dev-1.21
Merged master into dev 1.21 - 2/12/21
2021-02-13 00:41:04 -08:00
wojtekt 507dc0aa20 Promote immutable secrets and configmaps to GA 2021-02-12 16:11:40 +01:00
Karen Bradshaw 3fd65482e8 clean up use of word: simply 2021-02-07 12:15:29 -05:00
Kubernetes Prow Robot d2e7f4acab
Merge pull request #26352 from kbhawkey/fixup-remove-word-easy
clean up use of word: easy
2021-02-04 10:48:26 -08:00
Jacob Henner c59e3f0c27 Remove ServiceAccount Secret automounting section
The "Automatic mounting of manually created Secrets" section of the
Secrets documentation previously suggesting using PodPresets. PodPresets
have been removed, there is no alternate facility described, and it's
unclear if auto-mounting secrets based on associations with
ServiceAccounts was ever supported. Accordingly, the section should be
removed.
2021-02-03 22:38:20 -05:00
Karen Bradshaw 7d9916af0c clean up use of word: easy 2021-02-01 15:14:25 -05:00
Federico Gallo 329574f250
syntax
Replaced An for A
2021-01-31 18:53:53 -03:00
Kubernetes Prow Robot e30a9bb3d9
Merge pull request #26169 from tomkivlin/tomkivlin-secret-style
Update secret.md to match style guide
2021-01-26 11:18:31 -08:00
Bartlomiej Takuski 48004c99cc
Grammatical error in secret.md
Fixing a minor grammatical error in secret.md
2021-01-22 16:02:48 -06:00
Tom Kivlin aec6ea4895
Update secret.md
Remove prepended URLs and re-word to avoid use of "we".
2021-01-20 10:23:49 +00:00
Kubernetes Prow Robot 216ca3f06b
Merge pull request #24930 from adamhjk/patch-1
Explain the insecure by default nature of secrets
2021-01-16 19:47:43 -08:00
Qiming Teng a11047c153 Clean PodPreset docs, examples and links 2021-01-14 13:26:29 +08:00
Karen Bradshaw 0166a0b08e add docs for version shortcodes 2021-01-12 17:20:33 -05:00
Kubernetes Prow Robot e53ca2f6ee
Merge pull request #25791 from rjain21/patch-2
Update overview.md
2021-01-11 18:40:25 -08:00
Rajesh Jain dba227ea41
Update overview.md
As suggested, removed the language related to common vernacular. I think the documentation is well written in the common labels section, and can possibly be enhanced as more and more of these labels are implemented. So, just a link in the best practice section is sufficient as suggested by you.
2021-01-11 16:12:37 -08:00
Rajesh Jain 0747ad3dbf
Update overview.md
Use Kubernetes Common Labels (e.g. app.kubernetes.io/name, etc.) if appropriate instead of customized ones.
2020-12-23 14:39:51 -08:00
lostsquirrel 89b3cc978b
change token_id to token-id 2020-12-23 16:48:01 +08:00
Johnny Lim b537556b2d
Fix typo 2020-12-23 15:21:12 +09:00
Pavel Nosov 815fe37905
Fix typo in manage-resources-containers.md 2020-12-17 20:43:17 +03:00
Kubernetes Prow Robot 77362e21ec
Merge pull request #25498 from adambkaplan/ssh-auth-secret-caution
Caution Note for ssh-auth Secrets
2020-12-16 13:50:31 -08:00
Kubernetes Prow Robot 5e1e6196f2
Merge pull request #25027 from scoulomb-dup-fork/secret-env-var
Env var are not updated after a secret update
2020-12-08 21:26:50 -08:00
Sylvain Coulombel d77262740b Env var are not updated after a secret update 2020-12-08 21:12:03 +01:00
Adam Kaplan 7b80f63dbc Caution Note for ssh-auth Secrets
Adds a `caution` note that SSH key pairs do not establish trust between
clients and servers. A secondary method is required to establish trust
between an SSH client and host server, such as fixed `known_hosts` file.
Clients which do not establish adequate trust are vulnerable to "man in
the middle" impersonation attacks.

Signed-off-by: Adam Kaplan <adam.kaplan@redhat.com>
2020-12-08 12:21:08 -05:00
amyXia1994 75cd79a136
Update secret.md
fix minor syntax error
2020-12-07 21:28:37 +08:00
Kristin Martin 86d9492ccb Merge remote-tracking branch 'upstream/master' into merged-master-dev-1.20 2020-12-03 11:58:44 -08:00
Adam Jacob f2a9a3ef81 Explain the insecure by default nature of secrets
This PR adds a paragraph explaining the insecure by default nature of k8s secrets, and points users at the documentation to turn on encryption at rest and RBAC.

I think a second page needs to be created showing the correct combination of RBAC rules for various cases, which should eventually replace the link to the RBAC documentation.
2020-12-02 12:49:02 -08:00
Kubernetes Prow Robot 6f0128c21f
Merge pull request #24897 from tengqm/zh-resync-secret
[zh] Resync docs/concepts/configuration/secret.md
2020-12-02 05:40:50 -08:00
Qiming Teng 72a2bafb47 [zh] Resync docs/concepts/configuration/secret.md 2020-11-26 13:36:27 +08:00
reylejano-rxm d8ae37587e Merge remote-tracking branch 'upstream/master' into dev-1.20 to keep in sync - 11-25-2020 2020-11-25 07:03:22 -08:00
Tim Bannister 59dcd57cc9 Revise cluster management task
After removing the sections of the page that are not in line with the
content guide, there is little left.

Edit pages that link to removed task to no longer link there.
Redirect using 302 status so that there is a future opportunity to reinstate
the page or something like it.

- Avoid links to removed cluster management task
- Broaden applicability of “Safely Drain A Node”
- Add (stub) cluster upgrade task page
- Add a basic page about upgrading your cluster.
- Add a task page about enabling or disabling HTTP APIs
2020-11-20 10:22:25 +00:00
Somtochi Onyekwere ba77c903ed Merge remote-tracking branch 'upstream/master' into dev-1.20 2020-11-19 17:09:49 +01:00
Sundeep Malladi 97629eba26
Update configmap.md 2020-11-18 10:40:55 -06:00
Sylvain COULOMBEL 08fbeb5953 Use configmap inside a k8s pod command, as entrypoint is docker specific 2020-11-17 22:34:17 +01:00
reylejano-rxm 48266bd653 Merge remote-tracking branch 'upstream/master' into dev-1.20 2020-11-04 10:32:10 -08:00
Tim Hockin 300c2e8545 Better docs for standard topology labels
As per KEP 1659, topology labels are now more formalized.  Move away
from the older `failure-domain.beta` names ands use `topology` names
instead.
2020-11-03 11:27:58 -08:00
Qiming Teng ab58775702 Add secret type documentation 2020-10-29 09:26:44 +08:00
eagleusb 45ec60bed5
Merge master into dev-1.20 to keep in sync 2020-10-22 17:44:02 +02:00
Qiming Teng 070023b24a Fix links in concepts section 2020-10-22 14:24:56 +08:00
ljnaresh 64085d63a8 Move Pod Overhead concept inside Scheduling & Eviction 2020-10-15 01:13:17 +02:00
reylejano-rxm 34695f9380 dev-1.20 branch version for pod-lifecycle.md for feature state for k8s version 2020-10-14 09:35:18 -07:00
Kubernetes Prow Robot 9b8bf10f3a
Merge pull request #24402 from SumoLogic/master
Add explicit info about pod limits being applied to requests
2020-10-12 17:39:22 -07:00
Kubernetes Prow Robot aa426328ab
Merge pull request #24101 from ldynia/patch-1
changing image to nginx because game.example/demo-game does not exist
2020-10-12 17:09:24 -07:00
Kubernetes Prow Robot 245f8b6170
Merge pull request #23929 from SergeyKanzhelev/pidlimiting
pid limiting documentation
2020-10-09 01:15:07 -07:00