8f9446f87d
Merge branch 'main' into dev-1.26
2022-12-03 21:36:34 +00:00
50246c291b
Merge pull request #37770 from cici37/celDoc
...
Documentation for CEL in Admission Control
2022-12-01 16:33:53 -08:00
98d41f24ef
Address comments
2022-11-30 16:47:27 +00:00
4dc90ef731
Add doc for ValidatingAdmissionPolicy
2022-11-30 06:35:18 +00:00
cec61c1754
Merge pull request #38052 from krol3/merged-main-dev-1.26
...
Merge main branch into dev-1.26
2022-11-29 11:59:09 -08:00
9b4b8831ca
Merge pull request #38010 from Shubham82/Add_shell
...
Append triple backticks with shell for code snippet
2022-11-28 19:37:22 -08:00
f306471950
Merge pull request #35385 from nabokihms/patch-2
...
Add doc about how to get self subject attributes
2022-11-28 00:58:07 -08:00
cb9dc5a4ac
Update content/en/docs/reference/access-authn-authz/authentication.md
...
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2022-11-27 22:31:16 +01:00
35c3321b02
feat: Add caution note about rules field override in aggregated clusterroles
2022-11-25 16:24:13 +02:00
e100cf80c4
Added shell for code snippet.
2022-11-25 16:56:50 +05:30
707d3699ad
Append triple backticks with shell for code snippet
2022-11-22 13:37:49 +05:30
63008ca41a
Fix indentation and typos in kubelet-tls-bootstrapping.md
2022-11-21 07:40:54 +08:00
ed983897ff
Fix typos in /service-accounts-admin.md
2022-11-11 20:38:13 +08:00
5d61921a11
Apply suggestions from code review
...
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2022-11-10 12:53:21 +01:00
0a5e274a42
Add doc about how to get self subject attributes
...
Documentation for https://github.com/kubernetes/enhancements/issues/3325
2022-11-10 12:52:53 +01:00
f3248058fd
Merge pull request #33654 from sftim/20190601_task_configure_service_account_reword
...
Reword tasks relating to ServiceAccounts
2022-11-09 13:50:56 -08:00
6a3598661d
Merge pull request #37734 from sftim/20221105_tweak_admission_controllers_reference
...
Tweak reference for admission controllers
2022-11-06 02:02:15 -08:00
f348002c26
Tweak reference for admission controllers
...
- Improve page title
- Update page to match style guide
- Wording and correctness tweaks
2022-11-06 08:14:58 +00:00
98f310ab58
Updates page weights in reference docs section
...
Some of these pages are autogenerated, but not all. This PR updates the pages that are not autogenerated within the docs/en/reference section
2022-11-04 11:37:59 -04:00
f24c201017
Update content/en/docs/reference/access-authn-authz
2022-10-24 13:47:22 -04:00
a4629cd19b
Update ServiceAccount tasks in light of TokenRequest
...
Now that TokenRequest is the default way to get a service account token
for a Pod, update the task pages that relate to this.
2022-10-22 02:56:43 +01:00
f9db6ae934
Reword “Managing Service Accounts” task
2022-10-22 02:56:42 +01:00
bed6565a22
Merge pull request #37363 from T-Lakshmi/add-link-RFC7468
...
Added Hyperlink to RFC7468
2022-10-20 08:15:02 -07:00
4e6140bf04
Added Hyperlink to RFC7468
2022-10-18 17:06:55 +05:30
1eef742465
Favor EndpointSlice over Endpoints
...
Document EndpointSlice as the preferred and most appropriate mechanism
to record the backing endpoints of a Service.
Co-authored-by: Rob Scott <rob.scott87@gmail.com>
Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
2022-10-11 12:38:39 +01:00
d772e76af9
Merge pull request #36709 from gaeljw/patch-1
...
docs: update OIDC documentation to mention the signing algorithms configuration
2022-09-30 06:58:29 -07:00
523b0f89b4
Fix the feature state of PodSecurity
2022-09-19 09:00:29 +08:00
ce1dbcbdfa
Merge pull request #36538 from gengwg/main
...
kube-proxy is part of the Kubernetes node components
2022-09-14 09:41:00 -07:00
d057687f6f
Merge pull request #36660 from liggitt/scrape-secrets
...
Update service account token documentation
2022-09-10 16:31:23 -07:00
699ed970ae
docs: update OIDC documentation to mention the signing algorithms configuration
2022-09-09 17:34:17 +02:00
79f26d5922
Update service account token documentation
...
* Make example service account output match 1.24+ output with auto-generated tokens omitted
* Prefer `kubectl create token` as token creation mechanism
2022-09-07 16:00:27 -04:00
e8b9538785
Merge pull request #36043 from tomkivlin/tomkivlin/issue28580
...
Mention wildcard for RBAC resources and names
2022-09-07 09:24:37 -07:00
3de5a3768b
kube-proxy is part of the Kubernetes node components
...
kube-proxy is part of the Kubernetes node components not control plane. I think it's a typo.
ref: https://kubernetes.io/docs/concepts/overview/components/#node-components
2022-09-02 11:53:57 -07:00
9acf28fce9
fix note typo
2022-08-31 17:58:31 +08:00
468442d294
Wrap long lines where appropriate
2022-08-25 16:10:39 +08:00
93abc44b8b
Fix service accounts admin page
...
This PR removes some outdated texts that are confusing today.
2022-08-25 16:04:29 +08:00
9401ab7fb3
Merge pull request #36160 from windsonsea/gracheck
...
Fix typos on /access-authn-authz
2022-08-24 11:55:49 -07:00
61a5b7b69d
Fix typos on /access-authn-authz
2022-08-22 20:10:58 +08:00
9ec115bbdb
Mention wildcard for RBAC resources and names
...
Signed-off-by: Tom Kivlin <tom.kivlin@vodafone.com>
added link to best practice doc
update from sftim comments
update from liggitt comments
Update content/en/docs/reference/access-authn-authz/rbac.md
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
update from liggitt comment
2022-08-19 08:06:42 +00:00
6810fa976d
Merge remote-tracking branch 'upstream/main' into dev-1.25
2022-08-18 15:58:41 -03:00
0bd89d2c24
Merge pull request #36018 from tengqm/improve-admission-controllers
...
Update admission controllers page
2022-08-17 16:14:47 -07:00
96dd915152
Update admission controllers page
...
This PR updates the admission controllers page by:
- removing two plugins which have been removed since 1.18
- removing text about ancient history
- removing shortcode about plugins that graduated into GA a long time ago;
2022-08-16 22:33:37 +08:00
b167938367
Scrub PSP docs for 1.25
2022-08-15 21:09:41 -04:00
a472b72c33
remove insecure port option
2022-08-13 09:52:02 +05:30
4747731407
Fix --service-account-key-file description
...
--service-account-key-file flag to the kube-api-server is used to verify ServiceAccount tokens (and not to sign them).
--service-account-signing-key-file is the kube-api-server flag that's used to sign ServiceAccount tokens (short-lived ones).
--service-account-private-key-file is the kube-controller-manager flag that's used to sign ServiceAccount tokens (long-lived ones).
2022-08-02 00:37:09 -07:00
e2cda2eec3
Merge pull request #34716 from dmarinere/patch-1
...
added access to the statements explaining cluster role
2022-07-16 07:56:53 -07:00
7b4293b4fa
Batch fix links (5)
2022-07-11 13:54:18 +08:00
38ccc3383d
Merge pull request #34740 from tengqm/improve-admission-controllers
...
Tweak extensible admission controllers page
2022-07-10 18:11:47 -07:00
2f0d4a5d88
Clarify that list, get and watch can return data
...
The `get`, `list` and `watch` verbs can all be used to retrieve the full details of a resource. It is not an uncommon assumption amongst users that they return different data (e.g. that `list` only returns the names of resources; when it can return the full object).
This adds a caution block to highlight this potential gotcha.
2022-07-08 11:13:23 +01:00
a6ec7d8017
Tweak extensible admission controllers page
...
This PR removes outdated information about `admissionregistration.v1beta1` API groups
which are no longer supported in 1.24. Additional notes are added to
avoid confusion when parsing the examples.
2022-07-01 00:33:57 +08:00
Tim Bannister
Kubernetes Prow Robot
Cici Huang
Maksim Nabokikh
Sergey Shevchenko
Shubham Kuchhal
Michael
Abigail McCarthy
lakshmi prasuna
houjun
Gaël Jourdan-Weil
Jordan Liggitt
W Geng
whitebear009
Qiming Teng
windsonsea
Tom Kivlin
carolina valencia
Meha Bhalodiya
Rohit Agarwal
Sam Cook