Commit Graph

441 Commits

Author SHA1 Message Date
Marc Boorshtein e779d2d3fc
Update link to new project documentation site 2021-10-26 15:35:17 -04:00
Shubham Kuchhal 8fbccfcd8f Improvement: Correct the "empty" link in Dynamic Admission Control. 2021-10-26 13:51:38 +05:30
Pranshu Srivastava 2642b12efc made requested changes 2021-10-23 04:21:22 +05:30
Pranshu Srivastava 1ee91f08c9 fixed the broken link 2021-10-22 21:29:07 +05:30
chirangaalwis 029ec4cd67 Combine Service Account to map with resource kind 2021-10-18 10:53:00 +05:30
Chiranga Alwis dc326f0389 Add example for querying SA permissions
Add example for querying SA permissions

Add missing example for querying the API authorization layer for checking the permissions of a Service Account

Add missing SA identifying prefix

Improve suggested text to align with current content

Co-authored-by: Sam Roth <2413031+sejr@users.noreply.github.com>

Improve suggested text to align with current content

Co-authored-by: Sam Roth <2413031+sejr@users.noreply.github.com>
2021-10-11 18:14:39 +05:30
Shubham Kuchhal 1262222578 Change master to v1.22.0 2021-10-04 15:52:46 +05:30
Shubham Kuchhal d4a08df1b9 Improvement: Correct the "code" link in Dynamic Admission Control. 2021-10-04 12:40:03 +05:30
Richard Tweed 780dae2785
Clarified scenarios that could lead to privilege escalation (#29378)
* Clarified scenarios that could lead to privilege escalation

Made it clearer that it's not just creating pods which enables the privilege escalation. It's all workloads, all reconfiguration of workloads, and conceptually the creation and reconfiguration of custom resources which create workloads.

* Allowing link to priv escalation heading if required

* Update content/en/docs/reference/access-authn-authz/authorization.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Adding further clarifications

* Retitled escalation section

* Apply suggestions from vjftw

Co-authored-by: VJ Patel <VJftw@users.noreply.github.com>

* Clarified CRDs and reduced duplication

* Updating caution based on Geoffrey's comments

* Updating controller comment and linking out to reference docs

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: VJ Patel <VJftw@users.noreply.github.com>
2021-09-24 16:02:21 -07:00
Sergiusz Urbaniak 0ad09c36d6
fix expiration of bound SA tokens
Signed-off-by: Sergiusz Urbaniak <sergiusz.urbaniak@gmail.com>
2021-09-21 08:21:46 +02:00
Jonas Steinberg c2742b279e
"First this user must have [a] certificate issued..."
Added 'a' to the sentence "First this user must have certificate issued..." from the subsection "Normal Users"
2021-09-16 08:20:34 -05:00
Jonas Steinberg f9d5ab0627
add 'the' to 'without restarting [the] API server' from Static Token File section
smol.
2021-09-15 09:29:37 -05:00
Abirdcfly 19807f866c
Update content/en/docs/reference/access-authn-authz/rbac.md
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2021-08-23 21:45:10 +08:00
Abirdcfly 162da6561b Update rbac.md: Describe in detail how to specify resourceNames when using list/watch verbs 2021-08-19 23:39:48 +08:00
Kubernetes Prow Robot 87235b508d
Merge pull request #29311 from mengjiao-liu/update-githubbranch-param
Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value
2021-08-16 06:03:18 -07:00
Mengjiao Liu f945335af6 Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value 2021-08-10 18:03:21 +08:00
Kubernetes Prow Robot a80328f582
Merge pull request #29295 from mfilocha/fix/rbac-links
Fix links in RBAC default bindings table
2021-08-09 20:37:17 -07:00
Shubham Kuchhal bdb4cc4603 Fix the broken link for "webhook.go" 2021-08-09 16:17:06 +05:30
Maciej Filocha 647e9d6ca8 Fix links in RBAC default bindings table
An extra line needs to be added to allow
the link to be rendered properly.
Also reformatting link line to be better readable.
2021-08-09 12:09:29 +02:00
Kubernetes Prow Robot acc7252970
Merge pull request #29025 from robscott/endpoints-rbac
Adding documentation about Endpoints write access in wake of CVE-2021-25740
2021-07-26 23:20:45 -07:00
Kubernetes Prow Robot 5a813f1267
Merge pull request #28430 from margocrawf/master
Add Impersonate-Uid description to Authentication docs page.
2021-07-26 12:02:33 -07:00
Rob Scott d710925768
Adding documentation about Endpoints write access in wake of CVE-2021-25740 2021-07-26 11:32:06 -07:00
Kubernetes Prow Robot 9234f9454b
Merge pull request #28070 from enj/enj/f/duration_hint
Update CSR docs with expirationSeconds field details
2021-07-22 18:29:16 -07:00
Kubernetes Prow Robot f92e3ec2ba
Merge pull request #28903 from sejr/feat/podsecurity
Add Pod Security Standards documentation
2021-07-22 01:57:52 -07:00
Monis Khan f2b27507bd
Update CSR docs with expirationSeconds field details
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-21 16:59:02 -04:00
Monis Khan 9329467e6e
Complete details regarding CSR garbage collection
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-21 16:04:24 -04:00
Samuel Roth e0d4b53b1c incorporating initial round of feedback 2021-07-21 15:33:46 +00:00
Kubernetes Prow Robot 83f6cb6ed4
Merge pull request #28429 from ankeesler/exec-credential-v1
exec credential provider: v1 documentation
2021-07-21 06:54:07 -07:00
Andrew Keesler a30e63dcd6
exec credential provider: v1 documentation
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-07-13 10:47:14 -04:00
Margo Crawford d77368133a Add Impersonate-Uid description to Authentication docs page.
This change goes with https://github.com/kubernetes/kubernetes/pull/99961
in the Kubernetes repo.
2021-07-12 13:17:42 -07:00
Christopher Negus 548ba073da Merge main into dev-1.22 to keep in sync 2021-07-09 18:19:13 +00:00
AStraw dd443f0238
Fix pending CSR deleted time is 24 hours
From the code, the `pendingExpiration  = 24 * time.Hour`, so the pending CSR deleted time is 24 hours.
2021-07-09 16:49:54 +08:00
Edward Huang 0c5a2e06da Fixed up typo in extensible-admission-controllers.md 2021-07-05 11:41:11 +12:00
Kubernetes Prow Robot 369169dbb3
Merge pull request #28570 from zshihang/main
update doc for BoundServiceAccountTokenVolume ga
2021-06-24 01:17:41 -07:00
Shihang Zhang 3a9b198beb update doc for BoundServiceAccountTokenVolume ga 2021-06-23 09:47:49 -07:00
Kubernetes Prow Robot 5cfba9ebb2
Merge pull request #27114 from mengjiao-liu/update-signerName-desc
update certificate-signing-requests Signer description
2021-06-22 14:40:11 -07:00
chenxuc f0f957ff21 update state for PodSecurityPolicy 2021-06-20 16:17:40 +08:00
Shubham Kuchhal 5cf02fde98 Add Spaces. 2021-06-08 11:08:11 +05:30
Shubham Kuchhal baf379436b Improvement: Managing Service Accounts 2021-06-07 17:33:58 +05:30
Jai Govindani a6ab6dca21
docs(admission-controllers): update release status of TaintNodesByCondition
Signed-off-by: Jai Govindani <jai@honestbank.com>
2021-04-30 13:21:19 +07:00
Smuu 1f28ec0961
Fix syntax errors (#27735)
* Fix syntax errors

- fix wrong placed line breaks
- fix command mode start and end

* remove word 'simple'
2021-04-28 17:06:50 -07:00
Michael Gugino 27b2611cbc
Update webhook server example code link
Fix 404 error and point to the latest released code.
2021-04-23 12:19:23 -04:00
Shihang Zhang 87dd022604
Apply suggestions from code review
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2021-04-21 08:14:28 -07:00
Shihang Zhang 8a3d7acf03 update doc for BoundServiceAccountTokenVolume 2021-04-20 11:47:58 -07:00
Kubernetes Prow Robot d1e6a6fd24
Merge pull request #26605 from tengqm/admission-config-ref
Add WebhookAdmission reference
2021-04-14 01:30:42 -07:00
Qiming Teng 108149fa2f Add WebhookAdmission reference
This is a reference for WebhookAdmission config generated from kubernetes-sigs/reference-docs/genref tool.
More specifically, it is generated using the following command:

```shell
./genref -include apiserver-webhookadmission
```
2021-04-07 09:13:47 +08:00
Tim Bannister 965aa51daf Merge master into dev-1.21 to keep in sync, plus latest API reference
This sync merge includes API reference updates.
2021-04-06 21:38:24 +01:00
Qiming Teng b28250b68f Add reference for client-authentication v1beta1
This is a reference for client authentication API generated from kubernetes-sigs/reference-docs/genref tool.
More specifically, it is generated using the following command:

```shell
./genref -include client-authentication
```
2021-04-02 09:48:59 +08:00
Victor Palade ca046d9b1f Merge master into dev-1.21 to keep in sync 2021-03-26 21:29:52 +01:00
Kubernetes Prow Robot 55205a5c1f
Merge pull request #27225 from reylejano/update-denyexeconprivileged-removal
Update DenyExecOnPrivileged and DenyEscalatingExec deprecation notice
2021-03-26 06:40:43 -07:00
Kubernetes Prow Robot ec4840824d
Merge pull request #26472 from kbhawkey/cleanup-usage-just
clean up use of word: just
2021-03-26 04:34:43 -07:00
Kubernetes Prow Robot 59d1b368c1
Merge pull request #26018 from CharlyRipp/patch-1
Update misleading webhook authentication documentation
2021-03-26 04:22:44 -07:00
Kubernetes Prow Robot 16fcbcba69
Merge pull request #25735 from mpatters72/patch-2
Include missing cert export step
2021-03-26 03:30:45 -07:00
Shihang Zhang 7a461e5f13 update doc for BoundServiceAccountTokenVolume and RootCAConfigMap 2021-03-25 22:57:44 -07:00
Rey Lejano a6f829f29a update denyexeconprivileged removal to release 1.21
update denyexeconprivileged removal to release 1.21

update denyexeconprivileged removal to release 1.21
2021-03-25 18:02:29 -07:00
mengjiao.liu b2bc2fe7c2 update certificate-signing-requests Signer description 2021-03-18 18:01:32 +08:00
Karen Bradshaw 3ff5ec1eff clean up use of word: just 2021-03-17 19:57:40 -04:00
Mike Patterson f7506a3d98
Drop vagrant path and use generic name. 2021-03-17 15:38:56 -07:00
Mike Patterson 1c237dabfa
Update content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2021-03-17 15:15:34 -07:00
Victor Palade 70096affc5 Merge remote-tracking branch 'upstream/master' into dev-1.21 2021-03-05 17:05:24 +01:00
raghvenders 2b6074e8ed changes 2021-02-22 19:13:26 -06:00
Kubernetes Prow Robot 903ee369b2
Merge pull request #26119 from neha-viswanathan/25833-migrate-page
Migrate https://kubernetes.io/docs/concepts/cluster-administration/certificates/ to tasks section
2021-02-27 18:26:38 -08:00
Kubernetes Prow Robot a7bab8d6ca
Merge pull request #26751 from JensHeinrich/JensHeinrich-patch-sentence
Fix sentence
2021-02-27 16:12:39 -08:00
Jordan Liggitt 4103230c18 Clarify stability level of admission plugins 2021-02-27 12:46:20 -05:00
Jens Heinrich e864d7f3ca
Fix sentence
Add missing verb
2021-02-27 15:37:33 +01:00
Neha Viswanathan 41220636ec Migrate https://kubernetes.io/docs/concepts/cluster-administration/certificates/ to tasks section 2021-02-24 18:33:38 -08:00
Mike Patterson 67a342aae3
Update certificate-signing-requests.md
Maintain original docs `/home/vagrant/work/`working directory to be consistent.
2021-02-19 13:18:53 -08:00
Rey Lejano 736139e3e7 Merge master into dev-1.21 to keep in sync - SIG-Release 1.21 Docs team 2/19/21 2021-02-19 12:23:22 -08:00
Mike Patterson 6a166cf511
Update content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
Co-authored-by: Irvi Aini <7439590+irvifa@users.noreply.github.com>
2021-02-17 17:34:31 -08:00
Sahadat Hossain 4a0574a083
Update authentication.md 2021-02-13 17:19:13 +06:00
ChandaniM123 bfcea97d39 Merge remote-tracking branch 'upstream/master' into dev-1.21 2021-02-12 20:05:18 -05:00
Sahadat Hossain 11f542a599
Update authentication.md 2021-02-12 22:38:11 +06:00
Sahadat Hossain 5ad27062f6
Update content/en/docs/reference/access-authn-authz/authentication.md
Co-authored-by: Irvi Aini <7439590+irvifa@users.noreply.github.com>
2021-02-12 22:33:37 +06:00
Sahadat Hossain 2ae6da3c19
Merge branch 'master' into master 2021-02-12 17:04:39 +06:00
sahadat_hossain c0770869ff fixed some grammatical mistakes 2021-02-12 16:57:50 +06:00
Kubernetes Prow Robot d7d113abb7
Merge pull request #26297 from thockin/docs-kep2200
Add docs for KEP 2200 (DenyServiceExternalIPs)
2021-02-09 08:13:10 -08:00
Tim Hockin c111b4ac62 Docs for KEP 2200
* Document DenyServiceExternalIPs admission controller
* Re-order other admission controller blocks to be alphabetical
* Document DefaultIngressClass (missing)
2021-02-08 16:21:42 -08:00
Karen Bradshaw 3fd65482e8 clean up use of word: simply 2021-02-07 12:15:29 -05:00
Kubernetes Prow Robot d2e7f4acab
Merge pull request #26352 from kbhawkey/fixup-remove-word-easy
clean up use of word: easy
2021-02-04 10:48:26 -08:00
Kubernetes Prow Robot d148026f23
Merge pull request #26065 from margocrawf/master
Rewording of paragraph about provideClusterInfo key on Authentication page
2021-02-03 03:02:29 -08:00
Margo Crawford 67a750b5e0 Incorporated suggestions for provideClusterInfo paragraph
Signed-off-by: Margo Crawford <margaretc@vmware.com>
2021-02-01 15:35:49 -08:00
Karen Bradshaw 7d9916af0c clean up use of word: easy 2021-02-01 15:14:25 -05:00
RainbowMango f079aa8214 Update validatingadmissionwebhook and mutatingadmissionwebhook docs as they have been promoted to v1 2021-01-30 16:09:29 +08:00
Kubernetes Prow Robot c782fd6738
Merge pull request #25982 from ydFu/add-code-blocks-in-authorization
Add the code blocks in authorization.md
2021-01-29 10:25:41 -08:00
Kubernetes Prow Robot 34e8b55faf
Merge pull request #26027 from tengqm/clean-podpreset
Clean PodPreset docs, examples and links
2021-01-15 07:39:51 -08:00
Edward Rosen 08fe76be1a
Update rbac.md 2021-01-14 09:50:57 -05:00
Qiming Teng a11047c153 Clean PodPreset docs, examples and links 2021-01-14 13:26:29 +08:00
Kubernetes Prow Robot 2135ed8002
Merge pull request #25856 from edwardrosen/patch-1
Update rbac.md
2021-01-12 16:00:36 -08:00
Margo Crawford 5accf8f128 Rewording of paragraph about provideClusterInfo key
Signed-off-by: Margo Crawford <margaretc@vmware.com>
2021-01-12 13:51:15 -08:00
Edward Rosen a37b8a9fee
Update rbac.md
I've deleted the line break. The example in line 89 now seems to render ok in the preview. Could you please take a look?
2021-01-12 15:22:39 -05:00
Charly Rippenkroeger 7347a9d008
Remove code reference
Remove reference in favor of https://github.com/kubernetes/website/issues/23889
2021-01-11 11:57:32 -06:00
ydFu 1b70e98626 Add the code blocks in authorization.md
* Add the code blocks in the Markdown spec to make it easy to read.

* Add description that distinguish between **command** and **output** make it easy to read.

* Adjust description in Kubernetes components for smoother reading.

Signed-off-by: ydFu <ader.ydfu@gmail.com>
2021-01-09 11:57:24 +08:00
Charly Rippenkroeger e72ec8fbd0
Update misleading documentation
Update misleading information that HTTPS is required and link to self-documented code to find more edge-case configuration options
2021-01-08 13:40:07 -06:00
Edward Rosen 284d725ee0
Update rbac.md
I added a <br> after the end of the third bullet and backed out all of the other changes I suggested in the original pull request. I think this better matches the author's original intent. The only difference now between what's currently published and this edit is the line break coded after the third bullet.
2021-01-08 14:10:01 -05:00
Roman Marusyk 0245ad3aad
Remove too old content 2021-01-05 20:57:13 +02:00
Edward Rosen 95577c1fa5
Update rbac.md
The page renders the third bullet as a run-on sentence. I'm suggesting the example be placed in parentheses.
2020-12-29 16:20:54 -05:00
Rajesh Jain 7a175d551a
Update rbac.md
The language "For all service accounts in the "qa" namespace" in the example is confusing namespaces and groups. Language fixed to disambiguate between group and namespace. An additional example provided which uses both the group ("dev") AND the namespace ("development") to further illustrate this point
2020-12-26 13:41:02 -08:00
Mike Patterson ad85bdb054
Include missing cert export step
Updating the instructions to include missing step of getting issued cert exported from kubernetes, decoded, and ready for kubeconfig setup.
2020-12-20 11:36:20 -08:00
Kristin Martin 86d9492ccb Merge remote-tracking branch 'upstream/master' into merged-master-dev-1.20 2020-12-03 11:58:44 -08:00
TAKAHASHI Shuuji 2bc7fbad27
Fix the text in the authorization diagram 2020-11-26 19:09:42 +09:00
Kubernetes Prow Robot cb802d23b1
Merge pull request #25147 from timhughes/patch-1
Updates links to Dex
2020-11-25 21:46:19 -08:00
reylejano-rxm d8ae37587e Merge remote-tracking branch 'upstream/master' into dev-1.20 to keep in sync - 11-25-2020 2020-11-25 07:03:22 -08:00
Tim Hughes f5132af21e Updates links to Dex 2020-11-25 13:48:56 +00:00
TAKAHASHI Shuuji b5c0e5ea14 Replace the diagram on authentication page with the one by mermaid. 2020-11-23 14:12:21 +09:00
mkontani c2a33c3403 fix dex/kubernetes link 2020-11-19 18:09:22 +00:00
Kubernetes Prow Robot 20546141c0
Merge pull request #24698 from SergeyKanzhelev/runtimeGA
RuntimeClass GA
2020-11-12 03:10:50 -08:00
Irvi Aini bb33373bb3
Merge branch 'master' into dev-1.20 2020-11-11 14:55:30 +01:00
Kubernetes Prow Robot 6d90079245
Merge pull request #23842 from tengqm/improve-sa-admin
Improve ServiceAccount administration doc
2020-11-10 18:25:48 -08:00
Shihang Zhang 0b4952dd88 separate RootCAConfigMap from BoundServiceAccountToken and Beta 2020-11-10 15:18:29 -08:00
Kubernetes Prow Robot 358bc69dde
Merge pull request #24878 from ebriand/patch-5
Update default admission plugins for 1.19
2020-11-08 12:07:37 -08:00
Eric Briand cee9e620ca
Use different wording to not quote current version 2020-11-05 17:21:08 +01:00
Kubernetes Prow Robot b436a816e9
Merge pull request #24889 from reylejano-rxm/merged-master-dev-1.20
Merge master into dev-1.20 to keep in sync - 11-4-20
2020-11-04 12:46:53 -08:00
Kubernetes Prow Robot 44fd64ef5c
Merge pull request #24639 from ankeesler/exec-cred-prov-cluster-info
exec credential provider: cluster info details
2020-11-04 11:20:52 -08:00
reylejano-rxm 48266bd653 Merge remote-tracking branch 'upstream/master' into dev-1.20 2020-11-04 10:32:10 -08:00
Eric Briand c869ef67a8
Update default admission plugins for 1.19 2020-11-04 09:56:20 +01:00
Tim Hockin 300c2e8545 Better docs for standard topology labels
As per KEP 1659, topology labels are now more formalized.  Move away
from the older `failure-domain.beta` names ands use `topology` names
instead.
2020-11-03 11:27:58 -08:00
Andrew Keesler c855d5d68c
exec credential provider: make arbitrary JSON more explicit
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-11-03 12:19:16 -05:00
Sergey Kanzhelev 63283f5c31
Update content/en/docs/reference/access-authn-authz/admission-controllers.md 2020-10-29 17:22:26 -07:00
Sergey Kanzhelev 6d51948652
Update content/en/docs/reference/access-authn-authz/admission-controllers.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2020-10-29 17:19:11 -07:00
Sergey Kanzhelev 72a66b6969 RuntimeClass GA 2020-10-23 20:57:54 +00:00
eagleusb 45ec60bed5
Merge master into dev-1.20 to keep in sync 2020-10-22 17:44:02 +02:00
Qiming Teng 00fd1a68f2 Fix links in reference section 2020-10-22 15:19:30 +08:00
Qiming Teng 2ff3d1f7d3 Improve ServiceAccount administration doc
This PR fixes some nits in the doc and slightly revised the content to
conform to content guidelines.
2020-10-21 10:47:08 +08:00
Tim Bannister 78351ecaf5 Transfer “Controlling Access to the Kubernetes API” to the Concepts section
Readers from several different backgrounds will find it useful to know
about how Kubernetes controls access to its API. Promote this overview
to the Security subsection of Concepts.
2020-10-20 23:41:56 +01:00
Tim Bannister 3edb970570 Move API overview to be a Docsy section overview 2020-10-20 23:41:54 +01:00
Kubernetes Prow Robot ac8ce96c08
Merge pull request #24653 from jpetazzo/clarify-csr-cluster-signing-duration
Clarify expiration of certificates signed by kube-controller-manager
2020-10-20 14:28:19 -07:00
Kubernetes Prow Robot 7cfdee6b87
Merge pull request #22715 from logicalhan/monitoring
add documentation for system:monitoring rbac policy
2020-10-20 14:22:21 -07:00
Jerome Petazzoni 1932647552 Clarify expiration/lifetime of certificates signed by kube-controller-manager
The current wording of the documentation suggests that the duration/expiration
of the certificates can be changed by asking a specific time in the CSR. While
it's technically possible to specify a duration (e.g. as a custom annotation),
there is no agreed-upon method to do so, and the built-in signer uses a fixed
expiration time anyway.

This clarifies the situation.

See kubernetes/kubernetes#92678 for discussion.

Signed-off-by: Jerome Petazzoni <jerome.petazzoni@gmail.com>
2020-10-20 22:37:25 +02:00
Kubernetes Prow Robot df5f80f69b
Merge pull request #24604 from mdgrotheer/patch-1
Update authentication.md
2020-10-20 11:48:19 -07:00
Qiming Teng 92a09b23fa Style tweaking for CSR reference page 2020-10-20 09:08:54 +08:00
Andrew Keesler 6fc4e102b8
exec credential provider: cluster info details
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-10-19 10:44:37 -04:00
Matthew Grotheer 519f8ec5bc
Update authentication.md
Small grammatical corrections
2020-10-16 09:20:23 -07:00
luzg 5dab375fd3 Translate reference/certificate-signing-requests.md into Chinese and fix a bug in origin file, 24065
make change according to Tengqm's comment
2020-10-16 22:27:15 +08:00
Chen, Xu Chun (Simon) 4688a3679c
Update API group url
The "core API group" url points to a wrong page that does not explain anything about "core API group". Update the url to point to the correct page.
2020-10-09 15:21:58 +08:00
Han Kang f37f473210 add documentation for system:monitoring rbac policy 2020-10-08 15:50:49 -07:00
Kubernetes Prow Robot 0703805305
Merge pull request #24349 from liggitt/tokenreview
Clarify tokenreview API
2020-10-07 16:00:15 -07:00
Jordan Liggitt 5ff7c64134 Clarify tokenreview API 2020-10-07 10:21:30 -04:00
makocchi-git 23a13ec9d8
fix indent 2020-10-07 16:54:11 +09:00
Kumar Gaurav 2551034ebd
fix api version in certificate signing request doc 2020-10-06 22:42:32 +11:00
Kubernetes Prow Robot 9e01fb5560
Merge pull request #24037 from RULCSoft/fix-typos
Fix typos
2020-10-02 07:25:20 -07:00
santadasu 2a25de3a78
Update certificate-signing-requests.md
Reworded the sentence for easy comprehension.
2020-09-30 15:47:08 -07:00
Alain De Carolis 65e706e346
add signerName to CertificateSigningRequest
signerName is now mandatory. The provided example fails in 1.19.2 with: `kubernetes missing required field "signerName"`
2020-09-25 18:01:21 -04:00
Jorge Vallecillo 1213635880 Fix typos 2020-09-21 15:36:01 -06:00
Kubernetes Prow Robot 51d910e1eb
Merge pull request #24004 from negz/patch-1
Clarify that bind verb does not require resourceNames
2020-09-20 08:22:30 -07:00
Nic Cope 2f9b5e122e
Move bind verb resourceNames hint inline of example 2020-09-19 16:34:06 -07:00
Nic Cope f6496b0de5
Clarify that bind verb does not require resourceNames
This may be intuitive for most, but the existing phrasing read to me as
if `bind` were a special-case verb that _required_ me to explicitly state
which Roles or ClusterRoles it should apply to.

> You can only create/update a role binding if you […] or if you have
> been authorized to perform the bind verb on the referenced role.

> Grant them permissions needed to bind a particular role […]
> explicitly, by giving them permission to perform the bind verb on the
> particular Role (or ClusterRole).
2020-09-19 03:30:30 -07:00
Ramkumar Gowrishankar 147668a7d2 Add reference to default-not-ready-toleration-seconds and default-unreachable-toleration-seconds k8s-apiserver input parameters in the subsection describing the DefaultTolerationSeconds admission controller 2020-09-18 11:38:18 -04:00
povsister ba9bb9d916 Fix non-existing taint example 2020-09-17 17:41:20 +08:00
Kubernetes Prow Robot 5f5840f825
Merge pull request #23908 from cbrgm/patch-1
Fix spelling in authentication.md
2020-09-16 04:33:19 -07:00
Chris Bargmann c77d436eaf
Fix spelling in authentication.md
Rename `name-of-api-sever` to `name-of-api-server`.
2020-09-15 17:21:59 +02:00