Commit Graph

640 Commits

Author SHA1 Message Date
Raki af65de3877
Callout that impersonation needs (ClusterRole)Binding (#34082)
* Callout that impersonation needs (ClusterRole)Binding

I learned through trial and error that impersonation does not work with Role and RoleBinding - this was not obvious. It would be good if the docs call this out.

* Update content/en/docs/reference/access-authn-authz/authentication.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

* Update content/en/docs/reference/access-authn-authz/authentication.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Update content/en/docs/reference/access-authn-authz/authentication.md

Co-authored-by: ZSC <zacharysarah@users.noreply.github.com>

* Update content/en/docs/reference/access-authn-authz/authentication.md

Co-authored-by: ZSC <zacharysarah@users.noreply.github.com>

Co-authored-by: Qiming Teng <tengqm@outlook.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: ZSC <zacharysarah@users.noreply.github.com>
2022-06-14 13:09:33 -07:00
Sean Wei 34155fed0b Fix links for k/design-proposals-archive
The contributors/design-proposals in k/community was removed. It's only
available in k/design-proposals-archive repo now.

This commit also changes https://github.com/kubernetes/repo/blob/master/file.md
to https://git.k8s.io/repo/file.md for better consistency.
2022-06-10 22:49:04 +08:00
Guangwen Feng ef08c345e0 Fix an incorrect link in psp-to-pod-security-standards.md
Signed-off-by: Guangwen Feng <fenggw-fnst@fujitsu.com>
2022-06-08 11:40:04 +08:00
Kubernetes Prow Robot 090803440d
Merge pull request #33130 from tengqm/move-kubelet-authn-authz
Move kubelet authn authz
2022-06-07 19:11:49 -07:00
Kubernetes Prow Robot 11d56aacf6
Merge pull request #34076 from kadtendulkar/kad4
Update  content/en/docs/reference/access-authn-authz/bootstrap-tokens.md
2022-05-31 17:33:02 -07:00
Rishit Dagli 0be2557ecd Fix CertificateSubjectRestriction in Admission Controllers docs 2022-05-31 19:35:12 +00:00
kadtendulkar 6c82e81ede Update content/en/docs/reference/access-authn-authz/bootstrap-tokens.md 2022-05-31 22:02:36 +05:30
wei.wang 1cf774a05e [zh]Update content/zh/docs/reference/access-authn-authz/admission-controllers.md 2022-05-24 02:26:02 +08:00
Qiming Teng c992c4c04f Add imagepolicy.v1alpha1 API 2022-05-18 14:20:20 +08:00
Qiming Teng 90a395745d Cleanup admission-controllers page
This PR fixes several things in the admission-controllers page:

- The `PodSecurity` plugin is enabled by default, but it was not listed so;
- The `apiserver.config.k8s.io/v1alpha1` has been deprecated since v1.17, we are still documenting it side by side with the `apiserver.config.k8s.io/v1` API group;
- The `eventratelimit.admission.k8s.io/v1alpha1` API could use a better reference rather than the design doc; **The imagepolicy.v1alpha1 API is not documented anywhere, I'll add it later on.**
- There are statements about future, which should be removed;
- We are supposed refer to the `LimitRage` API reference rather than pointing users to the design docs;
- We are supposed refer to the `ResourceQuota` API reference rather than pointing users to the design docs;
- There are long lines in the page source which could have been wrapped properly.
2022-05-17 15:37:58 +08:00
Nate W 5ead53b3e8 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-05-02 10:29:49 -07:00
xin.li b831e96c6a [en] modify debug-cluster/audit
Signed-off-by: xin.li <xin.li@daocloud.io>
2022-04-29 20:40:59 +08:00
Nate W 712f45dee4 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-04-26 13:11:13 -07:00
Qiming Teng a3ea9f4caf Update references to the kubelet security files
This commit updates all the existing references to the files move in the previous commit.
2022-04-23 14:32:19 +08:00
Qiming Teng 89b0b1bf8f Move kubelet authentication/authorization out of CLI reference dir
The `kubelet-authentication-authorization` and the `kubelet-tls-bootstrapping`
pages do not belong to `reference/command-line-tools-reference` topic.
This PR moves them into `reference/access-authn-authz` subdirectory
which is a better fit.
The `static/_redirects` file is updated to point to the new location.
2022-04-23 14:30:14 +08:00
CJ Cullen a3638c4fde
Update rbac.md
Fix description of magic service account group.
2022-04-21 14:07:32 -07:00
Kubernetes Prow Robot c62c9e9c61
Merge pull request #32909 from Sea-n/deprecate-ext
Remove deprecated `extensions` API group in document
2022-04-20 08:57:43 -07:00
Nate W 0135d3642b Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-04-19 15:45:28 -07:00
Sean Wei 613bb080ff Remove deprecated `extensions` API group in document 2022-04-16 21:56:25 +08:00
Sean Wei 01c3c53b7d [en] Fix Markdown format 2022-04-14 01:33:53 +08:00
Qiming Teng 0bc8468bfa The PodOverhead feature is GA 2022-04-13 11:49:50 +08:00
Nate W e65201a5b3 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-04-11 09:31:28 -07:00
Mads Jensen eefc776e29
Fix typos in Markdown links. (#32802)
* Fix typos in Markdown links.

* Test

Co-authored-by: Mads Jensen <atombrella@users.noreply.github.com>
2022-04-08 00:16:41 -07:00
Nate W f85be125b9 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-03-31 15:18:13 -07:00
Tim Bannister 672813f3e7
Move PSP into Security concepts section
The logical navigation definitely works better if Pod Security admission
and PodSecurityPolicy are pages in the same section. Make It So.

Co-authored-by: Rey Lejano <rlejano@gmail.com>
2022-03-30 17:30:35 +01:00
Cezary Czekalski 5650e76c45 Fix typo 2022-03-29 19:27:32 +02:00
Qiming Teng 93bdfe8142 Move all volume expansion feature gates to GA 2022-03-29 10:38:58 +08:00
Margo Crawford a364ecae1f Remove references to client.authentication.k8s.io/v1alpha1 exec credential API
Signed-off-by: Margo Crawford <margaretc@vmware.com>
2022-03-21 09:27:55 -07:00
Kubernetes Prow Robot 991f671a02
Merge pull request #30721 from mlbiam/master
making wording clearer on extra in impersonation
2022-03-13 21:02:19 -07:00
Tim Allclair b8264dcfc7 Link to PSP migration guide from PSP to PSS reference 2022-02-25 10:27:52 -08:00
Tim Allclair 198ae37902
Rewrite PodSecurityPolicy migration guide (#31782) 2022-02-24 18:07:56 -08:00
Jay Beale c910edd70e
Correct the name: CertificateSigningRequests
- This page referenced the "CertificationSigningRequests API," but this should be "CertificateSigningRequests API" or "Certificates API." 
- Added a link to the documentation for CertificateSigningRequests.
2022-02-23 17:27:32 -08:00
Shubham a45bf8459d
Added Hyperlink to RFC3339. (#31836)
* Added Hyperlink to RFC3339.

* Wrapping a line!
2022-02-22 22:54:18 -08:00
Qiming Teng bce7fb57e2 Improve configuration API for 1.23
The previous commit for configuration APIs has some nits to fix:

- The client-authentication API has both v1beta1 and v1 supported.
  We need to include both.
- The kube-scheduler v1alpha1 is superceded by v1alpha3 which is new.
- The links to some external type definitions should point to the 1.23
  API rather than old versions.
2021-12-20 09:45:38 +08:00
Marc Boorshtein d4388492c5
Merge branch 'kubernetes:main' into master 2021-12-09 15:12:00 -05:00
Jesse Butler 584421fe11 Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-12-06 08:55:54 -05:00
Kubernetes Prow Robot a3c6627798
Merge pull request #30125 from chirangaalwis/patch-4
Combine Service Account to Map with Resource Type
2021-12-05 20:08:32 -08:00
Kubernetes Prow Robot c9fb665413
Merge pull request #30741 from ptux/patch-10
[en] Update admission-controllers.md
2021-12-05 20:04:32 -08:00
Kubernetes Prow Robot 63db6dbf66
Merge pull request #29717 from jonassteinberg1/patch-1
add 'the' to 'without restarting [the] API server' from Static Token …
2021-12-05 17:56:32 -08:00
Wang 8a8f9c40f9 Update admission-controllers.md 2021-12-06 09:16:27 +09:00
Marc Boorshtein 8dfd425486
making working clearer
*should* implies that an `extra` can be mixed case.  but really it can't because a mixed case `extra` will mismatch on an RBAC `ClusterRole` once the header is canonicalized.
2021-12-02 22:01:07 -05:00
Hemant Kumar 37532e231a Add docs for RecoverVolumeExpansionFailure feature 2021-11-29 16:37:57 -05:00
Jesse Butler d330226a95 Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-11-17 12:55:09 -05:00
Kubernetes Prow Robot 36be0ebac9
Merge pull request #30288 from drigz/patch-2
Remove "basic" from supported API auth methods
2021-11-16 18:51:53 -08:00
Kubernetes Prow Robot d2f227d73e
Merge pull request #29727 from jonassteinberg1/patch-2
"First this user must have [a] certificate issued..."
2021-11-12 21:06:46 -08:00
Jordan Liggitt 4b7784728a PodSecurity beta updates 2021-11-10 10:30:51 -05:00
Rodrigo Queiro f3921c9028
Remove "basic" from supported API auth methods
This was removed in v1.19.
2021-10-28 11:57:07 +02:00
Kubernetes Prow Robot 850e16fe38
Merge pull request #30193 from PranshuSrivastava/broken_link
fixed the broken link
2021-10-27 16:21:02 -07:00
Jonas Steinberg 094d9c034b
remove period and change script to command
Incorrect punctuative period and change the word script to command for uniformity.
2021-10-27 08:41:51 -05:00
Marc Boorshtein e779d2d3fc
Update link to new project documentation site 2021-10-26 15:35:17 -04:00
Shubham Kuchhal 8fbccfcd8f Improvement: Correct the "empty" link in Dynamic Admission Control. 2021-10-26 13:51:38 +05:30
Pranshu Srivastava 2642b12efc made requested changes 2021-10-23 04:21:22 +05:30
Pranshu Srivastava 1ee91f08c9 fixed the broken link 2021-10-22 21:29:07 +05:30
chirangaalwis 029ec4cd67 Combine Service Account to map with resource kind 2021-10-18 10:53:00 +05:30
Chiranga Alwis dc326f0389 Add example for querying SA permissions
Add example for querying SA permissions

Add missing example for querying the API authorization layer for checking the permissions of a Service Account

Add missing SA identifying prefix

Improve suggested text to align with current content

Co-authored-by: Sam Roth <2413031+sejr@users.noreply.github.com>

Improve suggested text to align with current content

Co-authored-by: Sam Roth <2413031+sejr@users.noreply.github.com>
2021-10-11 18:14:39 +05:30
Shubham Kuchhal 1262222578 Change master to v1.22.0 2021-10-04 15:52:46 +05:30
Shubham Kuchhal d4a08df1b9 Improvement: Correct the "code" link in Dynamic Admission Control. 2021-10-04 12:40:03 +05:30
Richard Tweed 780dae2785
Clarified scenarios that could lead to privilege escalation (#29378)
* Clarified scenarios that could lead to privilege escalation

Made it clearer that it's not just creating pods which enables the privilege escalation. It's all workloads, all reconfiguration of workloads, and conceptually the creation and reconfiguration of custom resources which create workloads.

* Allowing link to priv escalation heading if required

* Update content/en/docs/reference/access-authn-authz/authorization.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Adding further clarifications

* Retitled escalation section

* Apply suggestions from vjftw

Co-authored-by: VJ Patel <VJftw@users.noreply.github.com>

* Clarified CRDs and reduced duplication

* Updating caution based on Geoffrey's comments

* Updating controller comment and linking out to reference docs

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: VJ Patel <VJftw@users.noreply.github.com>
2021-09-24 16:02:21 -07:00
Sergiusz Urbaniak 0ad09c36d6
fix expiration of bound SA tokens
Signed-off-by: Sergiusz Urbaniak <sergiusz.urbaniak@gmail.com>
2021-09-21 08:21:46 +02:00
Jonas Steinberg c2742b279e
"First this user must have [a] certificate issued..."
Added 'a' to the sentence "First this user must have certificate issued..." from the subsection "Normal Users"
2021-09-16 08:20:34 -05:00
Jonas Steinberg f9d5ab0627
add 'the' to 'without restarting [the] API server' from Static Token File section
smol.
2021-09-15 09:29:37 -05:00
Abirdcfly 19807f866c
Update content/en/docs/reference/access-authn-authz/rbac.md
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2021-08-23 21:45:10 +08:00
Abirdcfly 162da6561b Update rbac.md: Describe in detail how to specify resourceNames when using list/watch verbs 2021-08-19 23:39:48 +08:00
Kubernetes Prow Robot 87235b508d
Merge pull request #29311 from mengjiao-liu/update-githubbranch-param
Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value
2021-08-16 06:03:18 -07:00
Mengjiao Liu f945335af6 Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value 2021-08-10 18:03:21 +08:00
Kubernetes Prow Robot a80328f582
Merge pull request #29295 from mfilocha/fix/rbac-links
Fix links in RBAC default bindings table
2021-08-09 20:37:17 -07:00
Shubham Kuchhal bdb4cc4603 Fix the broken link for "webhook.go" 2021-08-09 16:17:06 +05:30
Maciej Filocha 647e9d6ca8 Fix links in RBAC default bindings table
An extra line needs to be added to allow
the link to be rendered properly.
Also reformatting link line to be better readable.
2021-08-09 12:09:29 +02:00
Kubernetes Prow Robot acc7252970
Merge pull request #29025 from robscott/endpoints-rbac
Adding documentation about Endpoints write access in wake of CVE-2021-25740
2021-07-26 23:20:45 -07:00
Kubernetes Prow Robot 5a813f1267
Merge pull request #28430 from margocrawf/master
Add Impersonate-Uid description to Authentication docs page.
2021-07-26 12:02:33 -07:00
Rob Scott d710925768
Adding documentation about Endpoints write access in wake of CVE-2021-25740 2021-07-26 11:32:06 -07:00
Kubernetes Prow Robot 9234f9454b
Merge pull request #28070 from enj/enj/f/duration_hint
Update CSR docs with expirationSeconds field details
2021-07-22 18:29:16 -07:00
Kubernetes Prow Robot f92e3ec2ba
Merge pull request #28903 from sejr/feat/podsecurity
Add Pod Security Standards documentation
2021-07-22 01:57:52 -07:00
Monis Khan f2b27507bd
Update CSR docs with expirationSeconds field details
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-21 16:59:02 -04:00
Monis Khan 9329467e6e
Complete details regarding CSR garbage collection
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-21 16:04:24 -04:00
Samuel Roth e0d4b53b1c incorporating initial round of feedback 2021-07-21 15:33:46 +00:00
Kubernetes Prow Robot 83f6cb6ed4
Merge pull request #28429 from ankeesler/exec-credential-v1
exec credential provider: v1 documentation
2021-07-21 06:54:07 -07:00
Andrew Keesler a30e63dcd6
exec credential provider: v1 documentation
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-07-13 10:47:14 -04:00
Margo Crawford d77368133a Add Impersonate-Uid description to Authentication docs page.
This change goes with https://github.com/kubernetes/kubernetes/pull/99961
in the Kubernetes repo.
2021-07-12 13:17:42 -07:00
Christopher Negus 548ba073da Merge main into dev-1.22 to keep in sync 2021-07-09 18:19:13 +00:00
AStraw dd443f0238
Fix pending CSR deleted time is 24 hours
From the code, the `pendingExpiration  = 24 * time.Hour`, so the pending CSR deleted time is 24 hours.
2021-07-09 16:49:54 +08:00
Edward Huang 0c5a2e06da Fixed up typo in extensible-admission-controllers.md 2021-07-05 11:41:11 +12:00
Kubernetes Prow Robot 369169dbb3
Merge pull request #28570 from zshihang/main
update doc for BoundServiceAccountTokenVolume ga
2021-06-24 01:17:41 -07:00
Shihang Zhang 3a9b198beb update doc for BoundServiceAccountTokenVolume ga 2021-06-23 09:47:49 -07:00
Kubernetes Prow Robot 5cfba9ebb2
Merge pull request #27114 from mengjiao-liu/update-signerName-desc
update certificate-signing-requests Signer description
2021-06-22 14:40:11 -07:00
chenxuc f0f957ff21 update state for PodSecurityPolicy 2021-06-20 16:17:40 +08:00
Shubham Kuchhal 5cf02fde98 Add Spaces. 2021-06-08 11:08:11 +05:30
Shubham Kuchhal baf379436b Improvement: Managing Service Accounts 2021-06-07 17:33:58 +05:30
Jai Govindani a6ab6dca21
docs(admission-controllers): update release status of TaintNodesByCondition
Signed-off-by: Jai Govindani <jai@honestbank.com>
2021-04-30 13:21:19 +07:00
Smuu 1f28ec0961
Fix syntax errors (#27735)
* Fix syntax errors

- fix wrong placed line breaks
- fix command mode start and end

* remove word 'simple'
2021-04-28 17:06:50 -07:00
Michael Gugino 27b2611cbc
Update webhook server example code link
Fix 404 error and point to the latest released code.
2021-04-23 12:19:23 -04:00
Shihang Zhang 87dd022604
Apply suggestions from code review
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2021-04-21 08:14:28 -07:00
Shihang Zhang 8a3d7acf03 update doc for BoundServiceAccountTokenVolume 2021-04-20 11:47:58 -07:00
Kubernetes Prow Robot d1e6a6fd24
Merge pull request #26605 from tengqm/admission-config-ref
Add WebhookAdmission reference
2021-04-14 01:30:42 -07:00
Qiming Teng 108149fa2f Add WebhookAdmission reference
This is a reference for WebhookAdmission config generated from kubernetes-sigs/reference-docs/genref tool.
More specifically, it is generated using the following command:

```shell
./genref -include apiserver-webhookadmission
```
2021-04-07 09:13:47 +08:00
Tim Bannister 965aa51daf Merge master into dev-1.21 to keep in sync, plus latest API reference
This sync merge includes API reference updates.
2021-04-06 21:38:24 +01:00
Qiming Teng b28250b68f Add reference for client-authentication v1beta1
This is a reference for client authentication API generated from kubernetes-sigs/reference-docs/genref tool.
More specifically, it is generated using the following command:

```shell
./genref -include client-authentication
```
2021-04-02 09:48:59 +08:00
Victor Palade ca046d9b1f Merge master into dev-1.21 to keep in sync 2021-03-26 21:29:52 +01:00
Kubernetes Prow Robot 55205a5c1f
Merge pull request #27225 from reylejano/update-denyexeconprivileged-removal
Update DenyExecOnPrivileged and DenyEscalatingExec deprecation notice
2021-03-26 06:40:43 -07:00
Kubernetes Prow Robot ec4840824d
Merge pull request #26472 from kbhawkey/cleanup-usage-just
clean up use of word: just
2021-03-26 04:34:43 -07:00
Kubernetes Prow Robot 59d1b368c1
Merge pull request #26018 from CharlyRipp/patch-1
Update misleading webhook authentication documentation
2021-03-26 04:22:44 -07:00
Kubernetes Prow Robot 16fcbcba69
Merge pull request #25735 from mpatters72/patch-2
Include missing cert export step
2021-03-26 03:30:45 -07:00
Shihang Zhang 7a461e5f13 update doc for BoundServiceAccountTokenVolume and RootCAConfigMap 2021-03-25 22:57:44 -07:00
Rey Lejano a6f829f29a update denyexeconprivileged removal to release 1.21
update denyexeconprivileged removal to release 1.21

update denyexeconprivileged removal to release 1.21
2021-03-25 18:02:29 -07:00
mengjiao.liu b2bc2fe7c2 update certificate-signing-requests Signer description 2021-03-18 18:01:32 +08:00
Karen Bradshaw 3ff5ec1eff clean up use of word: just 2021-03-17 19:57:40 -04:00
Mike Patterson f7506a3d98
Drop vagrant path and use generic name. 2021-03-17 15:38:56 -07:00
Mike Patterson 1c237dabfa
Update content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2021-03-17 15:15:34 -07:00
Victor Palade 70096affc5 Merge remote-tracking branch 'upstream/master' into dev-1.21 2021-03-05 17:05:24 +01:00
raghvenders 2b6074e8ed changes 2021-02-22 19:13:26 -06:00
Kubernetes Prow Robot 903ee369b2
Merge pull request #26119 from neha-viswanathan/25833-migrate-page
Migrate https://kubernetes.io/docs/concepts/cluster-administration/certificates/ to tasks section
2021-02-27 18:26:38 -08:00
Kubernetes Prow Robot a7bab8d6ca
Merge pull request #26751 from JensHeinrich/JensHeinrich-patch-sentence
Fix sentence
2021-02-27 16:12:39 -08:00
Jordan Liggitt 4103230c18 Clarify stability level of admission plugins 2021-02-27 12:46:20 -05:00
Jens Heinrich e864d7f3ca
Fix sentence
Add missing verb
2021-02-27 15:37:33 +01:00
Neha Viswanathan 41220636ec Migrate https://kubernetes.io/docs/concepts/cluster-administration/certificates/ to tasks section 2021-02-24 18:33:38 -08:00
Mike Patterson 67a342aae3
Update certificate-signing-requests.md
Maintain original docs `/home/vagrant/work/`working directory to be consistent.
2021-02-19 13:18:53 -08:00
Rey Lejano 736139e3e7 Merge master into dev-1.21 to keep in sync - SIG-Release 1.21 Docs team 2/19/21 2021-02-19 12:23:22 -08:00
Mike Patterson 6a166cf511
Update content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
Co-authored-by: Irvi Aini <7439590+irvifa@users.noreply.github.com>
2021-02-17 17:34:31 -08:00
Sahadat Hossain 4a0574a083
Update authentication.md 2021-02-13 17:19:13 +06:00
ChandaniM123 bfcea97d39 Merge remote-tracking branch 'upstream/master' into dev-1.21 2021-02-12 20:05:18 -05:00
Sahadat Hossain 11f542a599
Update authentication.md 2021-02-12 22:38:11 +06:00
Sahadat Hossain 5ad27062f6
Update content/en/docs/reference/access-authn-authz/authentication.md
Co-authored-by: Irvi Aini <7439590+irvifa@users.noreply.github.com>
2021-02-12 22:33:37 +06:00
Sahadat Hossain 2ae6da3c19
Merge branch 'master' into master 2021-02-12 17:04:39 +06:00
sahadat_hossain c0770869ff fixed some grammatical mistakes 2021-02-12 16:57:50 +06:00
Kubernetes Prow Robot d7d113abb7
Merge pull request #26297 from thockin/docs-kep2200
Add docs for KEP 2200 (DenyServiceExternalIPs)
2021-02-09 08:13:10 -08:00
Tim Hockin c111b4ac62 Docs for KEP 2200
* Document DenyServiceExternalIPs admission controller
* Re-order other admission controller blocks to be alphabetical
* Document DefaultIngressClass (missing)
2021-02-08 16:21:42 -08:00
Karen Bradshaw 3fd65482e8 clean up use of word: simply 2021-02-07 12:15:29 -05:00
Kubernetes Prow Robot d2e7f4acab
Merge pull request #26352 from kbhawkey/fixup-remove-word-easy
clean up use of word: easy
2021-02-04 10:48:26 -08:00
Kubernetes Prow Robot d148026f23
Merge pull request #26065 from margocrawf/master
Rewording of paragraph about provideClusterInfo key on Authentication page
2021-02-03 03:02:29 -08:00
Margo Crawford 67a750b5e0 Incorporated suggestions for provideClusterInfo paragraph
Signed-off-by: Margo Crawford <margaretc@vmware.com>
2021-02-01 15:35:49 -08:00
Karen Bradshaw 7d9916af0c clean up use of word: easy 2021-02-01 15:14:25 -05:00
RainbowMango f079aa8214 Update validatingadmissionwebhook and mutatingadmissionwebhook docs as they have been promoted to v1 2021-01-30 16:09:29 +08:00
Kubernetes Prow Robot c782fd6738
Merge pull request #25982 from ydFu/add-code-blocks-in-authorization
Add the code blocks in authorization.md
2021-01-29 10:25:41 -08:00
Kubernetes Prow Robot 34e8b55faf
Merge pull request #26027 from tengqm/clean-podpreset
Clean PodPreset docs, examples and links
2021-01-15 07:39:51 -08:00
Edward Rosen 08fe76be1a
Update rbac.md 2021-01-14 09:50:57 -05:00
Qiming Teng a11047c153 Clean PodPreset docs, examples and links 2021-01-14 13:26:29 +08:00
Kubernetes Prow Robot 2135ed8002
Merge pull request #25856 from edwardrosen/patch-1
Update rbac.md
2021-01-12 16:00:36 -08:00
Margo Crawford 5accf8f128 Rewording of paragraph about provideClusterInfo key
Signed-off-by: Margo Crawford <margaretc@vmware.com>
2021-01-12 13:51:15 -08:00
Edward Rosen a37b8a9fee
Update rbac.md
I've deleted the line break. The example in line 89 now seems to render ok in the preview. Could you please take a look?
2021-01-12 15:22:39 -05:00
Charly Rippenkroeger 7347a9d008
Remove code reference
Remove reference in favor of https://github.com/kubernetes/website/issues/23889
2021-01-11 11:57:32 -06:00
ydFu 1b70e98626 Add the code blocks in authorization.md
* Add the code blocks in the Markdown spec to make it easy to read.

* Add description that distinguish between **command** and **output** make it easy to read.

* Adjust description in Kubernetes components for smoother reading.

Signed-off-by: ydFu <ader.ydfu@gmail.com>
2021-01-09 11:57:24 +08:00
Charly Rippenkroeger e72ec8fbd0
Update misleading documentation
Update misleading information that HTTPS is required and link to self-documented code to find more edge-case configuration options
2021-01-08 13:40:07 -06:00
Edward Rosen 284d725ee0
Update rbac.md
I added a <br> after the end of the third bullet and backed out all of the other changes I suggested in the original pull request. I think this better matches the author's original intent. The only difference now between what's currently published and this edit is the line break coded after the third bullet.
2021-01-08 14:10:01 -05:00
Roman Marusyk 0245ad3aad
Remove too old content 2021-01-05 20:57:13 +02:00
Edward Rosen 95577c1fa5
Update rbac.md
The page renders the third bullet as a run-on sentence. I'm suggesting the example be placed in parentheses.
2020-12-29 16:20:54 -05:00
Rajesh Jain 7a175d551a
Update rbac.md
The language "For all service accounts in the "qa" namespace" in the example is confusing namespaces and groups. Language fixed to disambiguate between group and namespace. An additional example provided which uses both the group ("dev") AND the namespace ("development") to further illustrate this point
2020-12-26 13:41:02 -08:00
Mike Patterson ad85bdb054
Include missing cert export step
Updating the instructions to include missing step of getting issued cert exported from kubernetes, decoded, and ready for kubeconfig setup.
2020-12-20 11:36:20 -08:00
Kristin Martin 86d9492ccb Merge remote-tracking branch 'upstream/master' into merged-master-dev-1.20 2020-12-03 11:58:44 -08:00
TAKAHASHI Shuuji 2bc7fbad27
Fix the text in the authorization diagram 2020-11-26 19:09:42 +09:00
Kubernetes Prow Robot cb802d23b1
Merge pull request #25147 from timhughes/patch-1
Updates links to Dex
2020-11-25 21:46:19 -08:00
reylejano-rxm d8ae37587e Merge remote-tracking branch 'upstream/master' into dev-1.20 to keep in sync - 11-25-2020 2020-11-25 07:03:22 -08:00
Tim Hughes f5132af21e Updates links to Dex 2020-11-25 13:48:56 +00:00
TAKAHASHI Shuuji b5c0e5ea14 Replace the diagram on authentication page with the one by mermaid. 2020-11-23 14:12:21 +09:00
mkontani c2a33c3403 fix dex/kubernetes link 2020-11-19 18:09:22 +00:00
Kubernetes Prow Robot 20546141c0
Merge pull request #24698 from SergeyKanzhelev/runtimeGA
RuntimeClass GA
2020-11-12 03:10:50 -08:00
Irvi Aini bb33373bb3
Merge branch 'master' into dev-1.20 2020-11-11 14:55:30 +01:00
Kubernetes Prow Robot 6d90079245
Merge pull request #23842 from tengqm/improve-sa-admin
Improve ServiceAccount administration doc
2020-11-10 18:25:48 -08:00
Shihang Zhang 0b4952dd88 separate RootCAConfigMap from BoundServiceAccountToken and Beta 2020-11-10 15:18:29 -08:00
Kubernetes Prow Robot 358bc69dde
Merge pull request #24878 from ebriand/patch-5
Update default admission plugins for 1.19
2020-11-08 12:07:37 -08:00
Eric Briand cee9e620ca
Use different wording to not quote current version 2020-11-05 17:21:08 +01:00
Kubernetes Prow Robot b436a816e9
Merge pull request #24889 from reylejano-rxm/merged-master-dev-1.20
Merge master into dev-1.20 to keep in sync - 11-4-20
2020-11-04 12:46:53 -08:00
Kubernetes Prow Robot 44fd64ef5c
Merge pull request #24639 from ankeesler/exec-cred-prov-cluster-info
exec credential provider: cluster info details
2020-11-04 11:20:52 -08:00
reylejano-rxm 48266bd653 Merge remote-tracking branch 'upstream/master' into dev-1.20 2020-11-04 10:32:10 -08:00
Eric Briand c869ef67a8
Update default admission plugins for 1.19 2020-11-04 09:56:20 +01:00
Tim Hockin 300c2e8545 Better docs for standard topology labels
As per KEP 1659, topology labels are now more formalized.  Move away
from the older `failure-domain.beta` names ands use `topology` names
instead.
2020-11-03 11:27:58 -08:00
Andrew Keesler c855d5d68c
exec credential provider: make arbitrary JSON more explicit
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-11-03 12:19:16 -05:00
Sergey Kanzhelev 63283f5c31
Update content/en/docs/reference/access-authn-authz/admission-controllers.md 2020-10-29 17:22:26 -07:00
Sergey Kanzhelev 6d51948652
Update content/en/docs/reference/access-authn-authz/admission-controllers.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2020-10-29 17:19:11 -07:00
Sergey Kanzhelev 72a66b6969 RuntimeClass GA 2020-10-23 20:57:54 +00:00
eagleusb 45ec60bed5
Merge master into dev-1.20 to keep in sync 2020-10-22 17:44:02 +02:00
Qiming Teng 00fd1a68f2 Fix links in reference section 2020-10-22 15:19:30 +08:00
Qiming Teng 2ff3d1f7d3 Improve ServiceAccount administration doc
This PR fixes some nits in the doc and slightly revised the content to
conform to content guidelines.
2020-10-21 10:47:08 +08:00
Tim Bannister 78351ecaf5 Transfer “Controlling Access to the Kubernetes API” to the Concepts section
Readers from several different backgrounds will find it useful to know
about how Kubernetes controls access to its API. Promote this overview
to the Security subsection of Concepts.
2020-10-20 23:41:56 +01:00
Tim Bannister 3edb970570 Move API overview to be a Docsy section overview 2020-10-20 23:41:54 +01:00
Kubernetes Prow Robot ac8ce96c08
Merge pull request #24653 from jpetazzo/clarify-csr-cluster-signing-duration
Clarify expiration of certificates signed by kube-controller-manager
2020-10-20 14:28:19 -07:00
Kubernetes Prow Robot 7cfdee6b87
Merge pull request #22715 from logicalhan/monitoring
add documentation for system:monitoring rbac policy
2020-10-20 14:22:21 -07:00
Jerome Petazzoni 1932647552 Clarify expiration/lifetime of certificates signed by kube-controller-manager
The current wording of the documentation suggests that the duration/expiration
of the certificates can be changed by asking a specific time in the CSR. While
it's technically possible to specify a duration (e.g. as a custom annotation),
there is no agreed-upon method to do so, and the built-in signer uses a fixed
expiration time anyway.

This clarifies the situation.

See kubernetes/kubernetes#92678 for discussion.

Signed-off-by: Jerome Petazzoni <jerome.petazzoni@gmail.com>
2020-10-20 22:37:25 +02:00
Kubernetes Prow Robot df5f80f69b
Merge pull request #24604 from mdgrotheer/patch-1
Update authentication.md
2020-10-20 11:48:19 -07:00
Qiming Teng 92a09b23fa Style tweaking for CSR reference page 2020-10-20 09:08:54 +08:00
Andrew Keesler 6fc4e102b8
exec credential provider: cluster info details
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-10-19 10:44:37 -04:00
Matthew Grotheer 519f8ec5bc
Update authentication.md
Small grammatical corrections
2020-10-16 09:20:23 -07:00
luzg 5dab375fd3 Translate reference/certificate-signing-requests.md into Chinese and fix a bug in origin file, 24065
make change according to Tengqm's comment
2020-10-16 22:27:15 +08:00
Chen, Xu Chun (Simon) 4688a3679c
Update API group url
The "core API group" url points to a wrong page that does not explain anything about "core API group". Update the url to point to the correct page.
2020-10-09 15:21:58 +08:00
Han Kang f37f473210 add documentation for system:monitoring rbac policy 2020-10-08 15:50:49 -07:00
Kubernetes Prow Robot 0703805305
Merge pull request #24349 from liggitt/tokenreview
Clarify tokenreview API
2020-10-07 16:00:15 -07:00
Jordan Liggitt 5ff7c64134 Clarify tokenreview API 2020-10-07 10:21:30 -04:00
makocchi-git 23a13ec9d8
fix indent 2020-10-07 16:54:11 +09:00
Kumar Gaurav 2551034ebd
fix api version in certificate signing request doc 2020-10-06 22:42:32 +11:00
Kubernetes Prow Robot 9e01fb5560
Merge pull request #24037 from RULCSoft/fix-typos
Fix typos
2020-10-02 07:25:20 -07:00
santadasu 2a25de3a78
Update certificate-signing-requests.md
Reworded the sentence for easy comprehension.
2020-09-30 15:47:08 -07:00
Alain De Carolis 65e706e346
add signerName to CertificateSigningRequest
signerName is now mandatory. The provided example fails in 1.19.2 with: `kubernetes missing required field "signerName"`
2020-09-25 18:01:21 -04:00
Jorge Vallecillo 1213635880 Fix typos 2020-09-21 15:36:01 -06:00
Kubernetes Prow Robot 51d910e1eb
Merge pull request #24004 from negz/patch-1
Clarify that bind verb does not require resourceNames
2020-09-20 08:22:30 -07:00
Nic Cope 2f9b5e122e
Move bind verb resourceNames hint inline of example 2020-09-19 16:34:06 -07:00
Nic Cope f6496b0de5
Clarify that bind verb does not require resourceNames
This may be intuitive for most, but the existing phrasing read to me as
if `bind` were a special-case verb that _required_ me to explicitly state
which Roles or ClusterRoles it should apply to.

> You can only create/update a role binding if you […] or if you have
> been authorized to perform the bind verb on the referenced role.

> Grant them permissions needed to bind a particular role […]
> explicitly, by giving them permission to perform the bind verb on the
> particular Role (or ClusterRole).
2020-09-19 03:30:30 -07:00
Ramkumar Gowrishankar 147668a7d2 Add reference to default-not-ready-toleration-seconds and default-unreachable-toleration-seconds k8s-apiserver input parameters in the subsection describing the DefaultTolerationSeconds admission controller 2020-09-18 11:38:18 -04:00
povsister ba9bb9d916 Fix non-existing taint example 2020-09-17 17:41:20 +08:00
Kubernetes Prow Robot 5f5840f825
Merge pull request #23908 from cbrgm/patch-1
Fix spelling in authentication.md
2020-09-16 04:33:19 -07:00
Chris Bargmann c77d436eaf
Fix spelling in authentication.md
Rename `name-of-api-sever` to `name-of-api-server`.
2020-09-15 17:21:59 +02:00
Chris Tomas 1425384888
fix description of signerName
Removed a line related to signerName because the feature is GA.
2020-09-15 09:14:52 -05:00
Chris Tomas 9a06c1bc95
Updating apiVersion for Certificate Signing Request object #1
Issue detected: There are two references to old apiVersion for CertificateSigningRequest object

Ref: CertificateSigningRequest API is promoted to certificates.k8s.io/v1 (https://kubernetes.io/docs/setup/release/notes/#api-change)

Fix: Replaced "certificates.k8s.io/v1beta1" by "certificates.k8s.io/v1"
2020-09-15 00:19:50 -05:00
Paulo Gomes 87d36ecfe1 Fix incorrect guidance on enabling EventRateLimit 2020-09-09 09:48:47 +01:00
Tim Bannister 24b350662c Remove links to cloud providers page 2020-08-28 12:53:42 +01:00
Kubernetes Prow Robot 70b75e16f0
Merge pull request #22981 from shuuji3/en/replace-special-quote-with-normal-ones
Replace special quote characters with normal ones
2020-08-26 14:55:02 -07:00
Savitha Raghunathan 95c94c03d5 resolving conflicts 2020-08-23 12:13:37 -04:00
shumiao 0519271bb4
fix a minor typo "scopes," -> "scopes", 2020-08-16 18:17:35 -07:00
Anna Jung 09d0f598fa Merge master into dev-1.19 to keep in sync 2020-08-11 08:34:02 -05:00
TAKAHASHI Shuuji c6a96128c4
Replace special quote characters with normal ones. 2020-08-11 21:05:22 +09:00
Karen Bradshaw 1e0c500571 add content_type param, kubeadm pages
add no_list, clean up toc-hide params
2020-08-10 08:41:49 -04:00
Qiming Teng d592baed54 Replace redirections in the reference section
This PR removes the redirections used in the reference section and fixes
some bad links.
2020-08-08 12:35:52 +08:00
Kubernetes Prow Robot 664464806c
Merge pull request #22470 from tengqm/fix-19985
Tweak paragraph to kill orphaned fragment
2020-08-06 08:51:42 -07:00
Yecheng Fu ee4aa53115 Fix the command in authorization.md 2020-08-04 09:08:36 +08:00
Savitha Raghunathan 53c71ad3f9 Merge remote-tracking branch 'upstream/master' into dev-1.19 2020-08-03 16:09:39 -04:00
Qiming Teng 031747e460 Tweak paragraph to kill orphaned fragment 2020-08-03 21:18:55 +08:00
Kubernetes Prow Robot d31b79cc15
Merge pull request #22743 from tabbysable/patch-1
Clarify meaning of group
2020-07-27 19:41:08 -07:00
Savitha Raghunathan e2a861c2f9 Merge remote-tracking branch 'upstream/master' into dev-1.19 2020-07-27 19:10:42 -04:00
Kubernetes Prow Robot e1485cd5d7
Merge pull request #22773 from tegonal/doc-auth
doc(auth): typo
2020-07-27 15:06:10 -07:00
Kubernetes Prow Robot 9880cbd671
Merge pull request #22318 from tengqm/fix-19996
Fix pages that reference removed API groups
2020-07-26 19:38:18 -07:00
Tabitha Sable 788706f42d
Clarify meaning of group
Define the word group without using the word group.
2020-07-25 23:35:34 -05:00
Tim Bannister e7c2510a89 Mark RBAC table header as header
Use <thead> and <tbody> elements to distinguish between the header and
the body of the table. Slightly improves accessibility and also visual
style.
2020-07-23 23:53:33 +01:00
Savitha Raghunathan 53f2d23359 resolving conflicts 2020-07-19 19:15:36 -04:00
Kubernetes Prow Robot c26fdebaad
Merge pull request #21108 from liggitt/csr-ga
Rotate kubelet client certificates GA, CSR API GA
2020-07-15 14:50:37 -07:00
Jordan Liggitt f12bc65e80 Address doc review comments 2020-07-15 12:24:42 -04:00
Jordan Liggitt 78d4a10243 CSR API to GA 2020-07-15 11:56:07 -04:00
Jordan Liggitt 2d4357abc6 Add deprecation warning info 2020-07-15 11:30:44 -04:00
Kubernetes Prow Robot f7d2e6da8c
Merge pull request #22441 from ankeesler/ankeesler/exec-cred-prov-install-hint
Update external credential providers docs with install hint details
2020-07-15 05:52:37 -07:00
Daniel Kucera 74dbe5de22
fix tolerationsWhitelist annotation example 2020-07-15 09:12:30 +02:00
Daniel Kucera bf3d54dedd
defaultTolerations example fix
defaultTolerations has to be unmarshall-able as an array
2020-07-14 13:01:21 +02:00
Andrew Keesler 371ac1ffb5 Update external credential providers docs with install hint details
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-07-09 11:57:16 -04:00
Savitha Raghunathan 0ebc16c10c resolving conflicts 2020-07-08 16:01:48 -04:00
Robert Stoll e140c2a6dc
doc(auth): typo 2020-07-06 08:09:26 +02:00
Jerry Park 64f62106c1 Fix issue of document link in some documents 2020-07-05 22:46:08 +09:00
Qiming Teng e097b93c8e Fix pages that reference removed API groups
Quite some resources have been moved out of the `extensions` API group
since 1.18; the `apps/v1beta1` and `apps/v1beta2` group versions are
also dropped. This PR updates the pages which still reference such API
groups or group versions.
2020-07-04 13:23:26 +08:00
Savitha Raghunathan 220d754880 Merge remote-tracking branch 'upstream/master' into dev-1.19 2020-06-30 18:02:37 -04:00
wawa d33dc9f178
shell fix
Fix missing'EOF' terminator
2020-06-28 15:51:22 +08:00
Emily Moss 2c6ba2cb32 address PR comments 2020-06-25 15:06:55 -07:00
Emily Moss 97850ed430 cert-signing-requests fix 2020-06-25 14:27:10 -07:00
Kubernetes Prow Robot 0c812fad45
Merge pull request #20443 from fernandokarnagi/master
Added steps for normal user authentication
2020-06-21 05:48:39 -07:00
Celeste Horgan 38248db194 Fix feature state tags 2020-06-19 08:50:33 -07:00
Savitha Raghunathan 7ddedb00a0 resolving conflicts 2020-06-17 17:11:24 -04:00
Qiming Teng 8a14cb1522 Cleanup non-resource paths
Some non-resource paths are now deprecated/hidden from the API server.
This PR updates the list.
2020-06-14 11:21:50 +08:00
Kubernetes Prow Robot 29f3c2858c
Merge pull request #21591 from scottstout/master
Changed whitelist to allowlist and blacklist to denylist.
2020-06-10 16:12:56 -07:00
Kubernetes Prow Robot 31abcec999
Merge pull request #21244 from tnqn/apiserver-port
Unify typical apiserver port in docs
2020-06-10 12:00:51 -07:00
Kubernetes Prow Robot 2a8702dade
Merge pull request #20726 from ZhiFeng1993/ZF--specify-verbs-in-admission-controller-doc
Specify verbs in admission controller doc
2020-06-10 11:14:52 -07:00
Karen Bradshaw ecc27bbbe7 add en pages 2020-06-09 19:33:15 -04:00
Scott Stout e38b9dc9c6 revised to minumize usage of whitelist/blacklist 2020-06-09 14:14:52 -05:00
Savitha Raghunathan f1966fe56a Merge remote-tracking branch 'upstream/master' into dev-1.19 2020-06-09 11:21:36 -04:00
Quan Tian c1693b5293 Unify typical apiserver port in docs 2020-06-08 07:20:31 -07:00
Zhi Feng 1743f99808 Specify verbs in admission controller doc 2020-06-05 16:25:32 -07:00
Kubernetes Prow Robot 33064defa4
Merge pull request #21222 from onlydole/bugfix-rbac-alias
Remove local serving issues by updating RBAC alias
2020-06-03 10:20:20 -07:00
Karen Bradshaw 311679eeb4 clean up prior api refs and links 2020-05-29 12:09:44 -04:00
Taylor Dolezal f7e795c5a2
Remove local serving issues by updating RBAC alias 2020-05-28 09:19:45 -07:00
Savitha Raghunathan 6311db5da4 Merge remote-tracking branch 'upstream/master' into dev-1.19 2020-05-26 18:03:50 -04:00
divyabhushan 6595ea6e86 Rendering issues on#service-account-permissions #21029 2020-05-21 17:25:14 +02:00
Savitha Raghunathan ea8179d29d Merge remote-tracking branch 'upstream/master' into dev-1.19 2020-05-11 16:07:40 -04:00
Adam Kaplan 55e17b86f2 mv "Assign Pods" and "Taints and Tolerations" concepts to "Scheduling and Eviction"
* Moved "Assigning Pods to Nodes" article to Concepts -> Scheduling and Eviction
* Moved "Taints and Tolerations" article to Concepts -> Scheduling and Eviction
* Updated weight of the "Kubernetes Scheduler" article so it appears first
* Updated redirects
* Replaced links to "Assigning Pods to Nodes" and "Taints and Tolerations" articles
to avoid redirects.

Signed-off-by: Adam Kaplan <adam.kaplan@redhat.com>
2020-05-11 11:29:16 -04:00
Monis Khan 45551e8cba Remove support for basic authentication
Signed-off-by: Monis Khan <mok@vmware.com>
2020-05-06 17:47:54 -07:00
Prasad Katti f11fec502f Update the text for a link to match page title 2020-05-05 08:44:35 -07:00
Lucas Servén Marín 7fe458bb58
authentication.md: fix OIDC flag typo in table
This commit corrects an flag in the table of OIDC flag descriptions.

Signed-off-by: Lucas Servén Marín <lserven@gmail.com>
2020-04-29 17:17:16 +02:00
Tobias Klauser 0cc8cd3e32 Update list of admission plugins enabled by default to k8s 1.18
Extracted by running `kube-apiserver -h | grep enable-admission-plugins`
on 1.18.2
2020-04-27 12:25:40 +02:00
Tim Bannister 5db3af4938 Revise cloud-controller-manager documentation 2020-04-21 19:59:45 +01:00
Fernando Karnagi b2d21616d8 updated mistypo 2020-04-21 09:15:09 +08:00
Fernando Karnagi eefe9b19bf Various updates 2020-04-21 09:12:17 +08:00
Fernando Karnagi 7bf6547bb0 Updated instruction on Create Certificate Request Kubernetes Object 2020-04-21 09:00:01 +08:00
Fernando Karnagi 5a9aeb7d26 Added steps for normal user authentication 2020-04-20 09:20:28 +08:00
Sergio Pena 5bc22bb175
Update certificate-signing-requests.md
Fix typo
2020-04-09 11:59:03 +02:00
Gaurav Sofat 09b1eb29d3
Update content/en/docs/reference/access-authn-authz/rbac.md
Co-Authored-By: Jordan Liggitt <jordan@liggitt.net>
2020-04-09 09:05:57 +05:30
Gaurav Sofat bc5ac6c7ec Modify RBAC Authorizer log message 2020-04-09 06:13:04 +05:30
Dixing (Dex) Xu 77cee072b8
fix capitalization 2020-03-31 19:53:59 +08:00
David Birks 1b47d0191b
Fix broken link to "Default roles and role bindings" (#19836) 2020-03-25 16:30:25 -07:00
Mateusz Gozdek 3a3312f788
Fix example in certificate-signing-requests.md (#19845)
The example ClusterRole rule mentions 'resourceName' property, which do not exist.
It should be 'resourceNames'.
2020-03-25 14:58:26 -07:00
Vineeth Pothulapati 998fba98d7
Official 1.18 Release Docs (#19116)
* Requesting for Approve Permisssions (#18550)

As I will be part of kubernetes 1.18 docs release team. Approve permissions will help me in approving the 1.18 docs enhnacemnts.

Signed-off-by: vineeth <vineethpothulapati@outlook.com>

* Change config on dev-1.18 branch to prepare for v1.18 release
 (#18557)

* Changed config.toml from v1.17 to v1.18

As a part of kubernetes 1.18 release work.

Signed-off-by: vineeth <vineethpothulapati@outlook.com>

* Removed the older prior version
i.e v1.13

Signed-off-by: vineeth <vineethpothulapati@outlook.com>

* Added missing v1.17 block into config.toml

Signed-off-by: vineeth <vineethpothulapati@outlook.com>

* Requesting for Approve Permisssions (#18550)

As I will be part of kubernetes 1.18 docs release team. Approve permissions will help me in approving the 1.18 docs enhnacemnts.

Signed-off-by: vineeth <vineethpothulapati@outlook.com>

* Change config on dev-1.18 branch to prepare for v1.18 release
 (#18557)

* Changed config.toml from v1.17 to v1.18

As a part of kubernetes 1.18 release work.

Signed-off-by: vineeth <vineethpothulapati@outlook.com>

* Removed the older prior version
i.e v1.13

Signed-off-by: vineeth <vineethpothulapati@outlook.com>

* Added missing v1.17 block into config.toml

Signed-off-by: vineeth <vineethpothulapati@outlook.com>

* add kubectl diff in common operations (#18665)

* bootstrap-tokens: promote to GA in 1.18 (#18428)

* Updated version for the HPA configurable scaling feature (#18965)

Signed-off-by: Arjun Naik <arjun.rn@gmail.com>

* kubeadm: add notes about deprecating kube-dns usage in 1.18 (#18851)

* kubeadm: add notes about deprecating kube-dns usage in 1.18

* implementation-details: update notes about DNS

* Sync up between dev-1.18 and master branches (#19055)

* Fixed outdated ECR credential debug message (#18631)

* Fixed outdated ECR credential debug message

The log message for troubleshooting kubelet auto fetching ECR credentils issue has been changed (noticed since 1.14), and the new message reads like this when verbose log level is set to 3:

      - `aws_credentials.go:109] unable to get ECR credentials from cache, checking ECR API`
      - `aws_credentials.go:116] Got ECR credentials from ECR API for <Your ECR AWS Account ID>.dkr.ecr.us-east-1.amazonaws.com`

This is based on the kubelet source code: 
    https://github.com/kubernetes/kubernetes/blob/release-1.14/pkg/credentialprovider/aws/aws_credentials.go#L91

This PR is to fix this and to avoid confusion for more people who are troubleshooting the kubelet ECR issue.

* Update content/en/docs/concepts/containers/images.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Fix deployment name in docs/tasks/administer-cluster/dns-horizontal-autoscaling.md (#18772)

* ru/docs/tutorials/hello-minikube.md: sync with English translation. (#18687)

* content/ru/docs/concepts/_index.md: use English names for kinds. (#18613)

* Fix French typo in "when" section (#18786)

* First Japanese l10n work for release-1.16 (#18790)

* Translate concepts/services-networking/connect-applications-service/ into Japanese (#17710)

* Translate concepts/services-networking/connect-applications-service/ into Japanese

* Apply review

* Translate content/ja/docs/tasks/_index.md into Japanese (#17789)

* add task index

* huge page

* ja-docs: Update kops Installation Steps (#17804)

* Update /ja/docs/tasks/tools/install-minikube/ (#17711)

* Update /ja/docs/tasks/tools/install-minikube/

* Apply review

* Apply review

* Update content/ja/docs/tasks/tools/install-minikube.md

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/docs/tasks/tools/install-minikube.md

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Translate tasks/configure-pod-container/assign-cpu-resource/ in Japanese (#16160)

* copy from content/en/docs/tasks/configure-pod-container/ to ja

* translate assign-cpu-resource.md in Japanese

* Update content/ja/docs/tasks/configure-pod-container/assign-cpu-resource.md

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/docs/tasks/configure-pod-container/assign-cpu-resource.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update assign-cpu-resource.md

ここの *request* と *limit* はほかの文中の単語とは異なり、YAMLのfieldを表すため、訳さないでおく

* fix translation

"Pod scheduling is based on requests." の箇所。
requestsに基づいているのは事実だが、直訳されたときになにを指すのかあいまいなので、対象を具体的に記述

* Translate concepts/workloads/controllers/deployment/ in Japanese #14848 (#17794)

* ja-trans: Translate concepts/workloads/controllers/deployment/ into Japanese (#14848)

* ja-trans: Improve Japanese translation in concepts/workloads/controllers/deployment/ (#14848)

* ja-trans: Improve Japanese translation in concepts/workloads/controllers/deployment/ (#14848)

* ja-trans: Improve Japanese translation in concepts/workloads/controllers/deployment/ (#14848)

* little fix (#18135)

* update index (#18136)

* Update /ja/docs/setup/_index.md (#18139)

* Update /ja/docs/tasks/tools/install-kubectl/ (#18137)

* update /docs/ja/tasks/tools/install-kubectl/

* fix mongon

* apply reveiw

* Update /ja/docs/reference/command-line-tools-reference/feature-gates/ (#18141)

* Update feature agete

* tidy up feature gates list

* translate new lines

* table caption

* blank

* する -> します

* apply review

* fix broken link

* Update content/ja/docs/reference/command-line-tools-reference/feature-gates.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* update translation

* remove line

* Update content/ja/docs/reference/command-line-tools-reference/feature-gates.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* rollpack

* Update /ja/docs/concepts/services-networking/service/ (#18138)

* update /ja/docs/concepts/services-networking/service/

* Update content/ja/docs/concepts/services-networking/service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/concepts/services-networking/service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/concepts/services-networking/service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/concepts/services-networking/service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* consider Endpoints as a Kubernetes resource

* full

* Update content/ja/docs/concepts/_index.md (#18145)

* Update concepts

* control plane

* apply review

* fix bold (#18165)

* Update /ja/docs/concepts/overview/components.md (#18153)

* update /ja/docs/concepts/overview/components.md

* some japanese docs are already there

* translate prepend

* apply upstream changes (#18278)

* Translate concepts/services-networking/ingress into Japanese #17741 (#18234)

* ja-trans: Translate concepts/services-networking/ingress into Japanese (#17741)

* ja-trans: Improve Japanese translation in concepts/services-networking/ingress (#17741)

* ja-trans: Improve Japanese translation in concepts/services-networking/ingress (#17741)

* Update pod overview in Japanese (#18277)

* Update pod-overview

* Update content/ja/docs/concepts/workloads/pods/pod-overview.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/concepts/workloads/pods/pod-overview.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/concepts/workloads/pods/pod-overview.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/concepts/workloads/pods/pod-overview.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/concepts/workloads/pods/pod-overview.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/concepts/workloads/pods/pod-overview.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* ノード

* Update content/ja/docs/concepts/workloads/pods/pod-overview.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/concepts/workloads/pods/pod-overview.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>

* Translate concepts/scheduling/scheduler-perf-tuning/ in Japanese #17119 (#17796)

* ja-trans: Translate concepts/scheduling/scheduler-perf-tuning/ into Japanese (#17119)

* ja-trans: Improve Japanese translation in concepts/scheduling/scheduler-perf-tuning/ (#17119)

* ja-trans: Improve Japanese translation in concepts/scheduling/scheduler-perf-tuning/ (#17119)

* ja-trans:conetent/ja/casestudies/nav (#18450)

* Translate tasks/debug-application-cluster/debug-service/ in Japanese (#18395)

* Translate tasks/debug-application-cluster/debug-service/ in Japanese

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Change all `Pods` to `Pod` and `Endpoints` to `Endpoint`

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Updated content pointed out in review

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Apply suggestions from code review

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Apply suggestions from review

* Apply suggestions form review

* Apply suggestions from review

* Apply suggestions from review

* Apply suggestions from code review

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/tasks/debug-application-cluster/debug-service.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

Co-authored-by: inductor <kohei.ota@zozo.com>
Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>

* Translate concepts/extend-kubernetes/api-extension/custom-resources/ into Japanese (#18200)

* Translate concepts/extend-kubernetes/api-extension/custom-resources/ into Japanese

* Apply suggestions from code review between L1 an L120 by oke-py

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Apply suggestions from code review by oke-py

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update CustomResourceDefinition not to localize into Japanese

* Revert the link to customresourcedefinitions to English

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Apply suggestions from code review by oke-py and inductor

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>
Co-Authored-By: inductor <kohei.ota@zozo.com>

* Apply a suggestion from review by inductor

* Apply a suggestion from code review by oke-py

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>
Co-authored-by: inductor <kohei.ota@zozo.com>

* Translate tasks/configure-pod-container/quality-service-pod/ into Japanese (#16173)

* copy from content/en/docs/tasks/configure-pod-container/quality-service-pod.md to Ja

* Translate tasks/configure-pod-container/quality-service-pod/ into Japanese

Guaranteed, Burstable, BestEffortは用語として存在するので訳さない

Signed-off-by: Takuma Hashimoto <takumaxd+github@gmail.com>

* Update content/ja/docs/tasks/configure-pod-container/quality-service-pod.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/tasks/configure-pod-container/quality-service-pod.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/tasks/configure-pod-container/quality-service-pod.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* Update content/ja/docs/tasks/configure-pod-container/quality-service-pod.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>

* Translate content/ja/docs/reference/kubectl/cheatsheet.md (#17739) (#18285)

* Translate content/ja/docs/reference/kubectl/cheatsheet.md (#17739)

* Translated kubectl cheet sheet.

* Fix typos in content/ja/docs/reference/kubectl/cheatsheet.md (#17739)

* Fix japanese style in content/ja/docs/reference/kubectl/cheatsheet.md

* Fix typo in content/ja/docs/reference/kubectl/cheatsheet.md

* Fix translation in content/ja/docs/reference/kubectl/cheatsheet.md

* Fix typo in content/ja/docs/reference/kubectl/cheatsheet.md

* Fix typo in content/ja/docs/reference/kubectl/cheatsheet.md

* Modify translation for casestudies (#18767)

* modify terminology

* add ten

* update translation

* update

* update

* update

* fix typo (#18769)

* remove english comment (#18770)

* ja-trans:conetent/ja/casestudies/spotify  (#18451)

* ja-trans: content/ja/case-studies/spotify

* Update content/ja/case-studies/spotify/index.html

Updated with the proposal  from inductor

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Updated with inductor 's proposal

Co-Authored-By: inductor <kohei.ota@zozo.com>

* ja-trans: content/ja/case-studies/spotify

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

* Update content/ja/case-studies/spotify/index.html

Co-Authored-By: inductor <kohei.ota@zozo.com>

Co-authored-by: inductor <kohei.ota@zozo.com>

* Translate Japanese headers (#18776)

* translate headers

* add index for references

* Update content/ja/docs/setup/production-environment/tools/_index.md

Co-Authored-By: Naoki Oketani <okepy.naoki@gmail.com>

* translate controller

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>

* ja-docs: translate install-kubeadm into Japanese (#18198)

* ja-docs: translate install-kubeadm into Japanese

* translate table title in install-kubeadm to Japanese

* update kubeadm install doc

* remove extra spaces

* fix translation miss

* translate url title into japanese

* fix translation miss

* remove line break in sentence and translate title

* remove extra line break

* remove extra line break

* fix translation miss

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>
Co-authored-by: Samuel Kihahu <kihahu@users.noreply.github.com>
Co-authored-by: Takuma Hashimoto <takuma-hashimoto@freee.co.jp>
Co-authored-by: Keita Akutsu <kakts.git@gmail.com>
Co-authored-by: Masa Taniguchi <maabou512@gmail.com>
Co-authored-by: Soto Sugita <sotoiwa@gmail.com>
Co-authored-by: Kozzy Hasebe <48105562+hasebe@users.noreply.github.com>
Co-authored-by: kazuaki harada <canhel.4suti50y.salamander@gmail.com>
Co-authored-by: Shunsuke Miyoshi <s.miyoshi@jp.fujitsu.com>

* delete zh SEE ALSO(51-54) (#18788)

* Added missing brackets in markdown (#18783)

* Fix broken links in api_changes doc (#18743)

* fix jump (#18781)

* fix redundant note (#18780)

* Fix typo: default-manager -> default-scheduler (#18709)

like #18649 #18708

* fix issue #18738 (#18773)

Signed-off-by: Dominic Yin <yindongchao@inspur.com>

* Correct description of kubectl (#18172)

* Correct description of kubectl

Given that `kubectl` is not a [command line interface (CLI)](https://en.wikipedia.org/wiki/Command-line_interface), I suggest calling it what it is -- a control utility (ctl = control). The term "tool" is commonly used in place of "utility," including the `kubectl` docs.

A CLI presents the user with a command prompt at which the user can enter multiple command lines that a command-line interpreter interprets and processes. Think of `bash`, `emacs`, or a SQL shell.  Since `kubectl` is not run in a shell, it is not a CLI.

Here are related docs that correctly refer to `kubectl` as a "command-line tool":

- https://kubernetes.io/docs/reference/tools/#kubectl
- https://kubernetes.io/docs/reference/glossary/?fundamental=true#term-kubectl
- https://kubernetes.io/docs/tasks/tools/install-kubectl/
- https://kubernetes.io/docs/reference/kubectl/kubectl/

* Update content/en/docs/reference/kubectl/overview.md

Co-Authored-By: Zach Corleissen <zacharysarah@users.noreply.github.com>

Co-authored-by: Zach Corleissen <zacharysarah@users.noreply.github.com>

* Add blog post: Reviewing 2019 in Docs (#18662)

Tiny fix

Feedback from onlydole

Add missing link

Incremental fixes

Revise Jim's job title

Update content/en/blog/_posts/2020-01-17-Docs-Review-2019.md

Co-Authored-By: Celeste Horgan <celeste@cncf.io>

Feedback from celeste, change date

* Update OWNERS_ALIASES (#18803)

* Create Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md (#16869)

* Create Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-authored-by: Bob Killen <killen.bob@gmail.com>
Co-authored-by: Taylor Dolezal <onlydole@users.noreply.github.com>

* blog: introduce CSI support for ephemeral inline volumes (#16832)

* csi-ephemeral-inline-volumes: introduce CSI support for ephemeral inline volumes

This was alpha in Kubernetes 1.15 and became beta in 1.16. Several CSI
drivers already support it (soon...).

* csi-ephemeral-inline-volumes: bump date and address feedback (NodeUnpublishVolume)

* csi-ephemeral-inline-volumes: add examples and next steps

* csi-ephemeral-inline-volumes: rename file, minor edits

* csi-ephemeral-inline-volumes: include Docker example

* Create 2019-12-10-Gamified-Chaos-Engineering-Tool-for-Kubernetes.md (#18062)

* Create 2019-12-10-Gamified-Chaos-Engineering-Tool-for-Kubernetes.md

* Update and rename 2019-12-10-Gamified-Chaos-Engineering-Tool-for-Kubernetes.md to 2019-01-16-Gamified-Chaos-Engineering-Tool-for-Kubernetes.md

* Update 2019-01-16-Gamified-Chaos-Engineering-Tool-for-Kubernetes.md

* Update and rename 2019-01-16-Gamified-Chaos-Engineering-Tool-for-Kubernetes.md to 2019-01-22-Gamified-Chaos-Engineering-Tool-for-Kubernetes.md

Co-authored-by: Kaitlyn Barnard <kaitlynbarnard10@gmail.com>

* Revert "Create Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md (#16869)" (#18805)

This reverts commit 2c4545e105.

* add blog k8s on mips (#18795)

* add blog k8s on mips

* modify english title to chinese

* modify some error

* Remove user-journeys legacy content #18615 (#18779)

* Use monospace for HostFolder and VM in the French Minikube setup guide. (#18749)

* Add French version of persistent volume page concept page (#18706)

* Add French version of persistent volume page concept page

* Fix

* Fix

* Fix

* Fix

* sync content/zh/docs/reference/issues-security/ en zh (#18727)

* update zh-translation: /docs/concepts/storage/volume-snapshots.md (#18650)

* Clean up user journeys content for zh (#18815)

* Followup fixes for: Add resource version section to api-concepts (#18069)

* Followup fixes for: Add resource version section to api-concepts documentation

* Apply feedback

* Apply feedback

* Switch paragraph to active voice

* Add Community and Code of Conduct for ID (#18828)

* Add additional ways to contribute part to update zh doc (#18762)

* Add additional ways to contribute part to update zh doc

* Add original English text

* Update content/zh/docs/contribute/_index.md

Co-Authored-By: chentanjun <tanjunchen20@gmail.com>

Co-authored-by: chentanjun <tanjunchen20@gmail.com>

* Clean up extensions/v1beta1 in docs (#18839)

* fix an example path (#18848)

* Translating network plugins (#17184)

* Fix for a typo (#18822)

* tą instalację -> tę instalację / (https://sjp.pwn.pl/poradnia/haslo/te-czy-ta;1598.html) (#18801)

* Fix typo in Scalability section (#18866)

The phrase `very larger` is not valid, it is supposed to be either `very
large` or `larger`. Propose to have it `very large`.

Signed-off-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>

* Add Polish translation of Contribute index page (#18775)

Co-Authored-By: Michał Sochoń <kaszpir@gmail.com>

Co-authored-by: Michał Sochoń <kaszpir@gmail.com>

* Clean up extensions/v1beta1 in docs (#18838)

* Add Indonesian Manage Compute Resources page (#18468)

* Add Indonesian Manage Compute Resources page

* Updates to id Manage Compute Resources page

* Add DaemonSet docs ID localization (#18632)

Signed-off-by: giovanism <giovanism@outlook.co.id>

* Fix typo in en/docs/contribute/style/content-guilde.md (#18862)

* partial fix for SEE ALSO section under content/zh/docs/reference/setup-tools/kubeadm/generated/ need to be deleted #18411 (#18875)

* See Also removed file 31

* see also removed file 32

* see also removed file 33

* see also removed file 34

* see also removed file 35

* Modify pod.md (#18818)

website/content/ko/docs/concepts/workloads/pods/pod.md
23 line
쿠버네티스는는 -> 쿠버네티스는
modify

* remove $ following the style guide (#18855)

* Add Hyperlink to Kubernetes API (#18852)

* Drive by copy edit of blog post (#18881)

* Medium copy edit.

* more fixes

* Translate Events Calendar (#18860)

* Adding Bahasa Indonesia translation for Device Plugin page #18676 (#18676)

Co-Authored-By: Gede Wahyu Adi Pramana <tokekbesi@gmail.com>

Co-authored-by: Gede Wahyu Adi Pramana <tokekbesi@gmail.com>

* change escaped chars to markdown (#18858)

Helps to keep doc clean for long term

* Fix header layout on Safari (#18888)

* Fix references to sig-docs-l10n-admins (#18661)

* Add French deployment concept page (#18516)

* Add French deployment concept page

* Fix

* Fix

* Fix

* Update content/fr/docs/concepts/workloads/controllers/deployment.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Fix

* Fix

* Fix

* Update content/fr/docs/concepts/workloads/controllers/deployment.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/fr/docs/concepts/workloads/controllers/deployment.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/fr/docs/concepts/workloads/controllers/deployment.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/fr/docs/concepts/workloads/controllers/deployment.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Fix ZH security aliases (#18895)

* disable simplytunde as an approver due to inactivity. (#18899)

Always welcome to come back if able to become active
again

Signed-off-by: Brad Topol <btopol@us.ibm.com>

* install container runtimes without prompts (#18893)

In Kubernetes docs, all of the packages that are required to set up the
Kubernetes are installed without requiring any prompts through
the package manager (like apt or yum) except for the container runtimes.

https://kubernetes.io/docs/setup/production-environment/container-runtimes/

So, it would be better to have these installations with prompts (yes) disabled.

* Fix small typos (#18886)

* Fix small typos

Small typos noticed and fixed in:

- configure-upgrade-etcd.md

- reconfigure-kubelet.md

Signed-off-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>

* Rephrase a paragraph on etcd upgrade

en\docs\tasks\administer-cluster\configure-upgrade-etcd.md

Following a suggestion in #18886, I've rephrased a sentence on etcd
upgrade prerequisites.

Signed-off-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>

* Clean up extensions/v1beta1 in docs (#18841)

* Update _index.md (#18825)

* Run minikube docker-env in a shell-independent way (#18823)

* doc: correct pv status for pv protection example. (#18816)

* Small editorial fixes in glossary entries (#18807)

* Small editorial fixes in glossary entries

* Revert the wording in the glossary term for proxy

* fix doc conflict regarding postStart (#18806)

* kubeadm: improvements to the cert management documentation (#18397)

- move the sections about custom certificates and external CA
to the kubeadm-certs page
- minor cleanups to the kubeadm-certs page, including updated output
for the check-expiration command
- link the implementation details page to the new locations
for custom certs and external CA

* fix doc conflict regarding postStart

* Grammar (#18785)

* grammar: 'to' distributes over 'or'

* grammar: reword

per app.grammarly.com

* grammar: simplify

from app.grammarly.com

* spelling: etc.

* feat: add ephermeral container approach inside pod debug page. (#18754)

* doc: add pod security policy reference link to document. (#18729)

* doc: add pod security policy reference link to document.

* doc: add what's next for pod-security-policy ref.

* Revise version requirements (#18688)

Assume that the reader is running a version of Kubernetes that supports
the Secret resource.

* en: Remove kubectl duplicate example (#18656)

With #16974 and the removal of --include-uninitialized flag, the
second
    and third examples of kubectl delete become equal, thus leading to
    duplication and being confusing. Suggest to remove the duplicate and
    replace it with another example in the future if needed.

    Observed in v1.16 and v1.17 documentation.

    Signed-off-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>

* Fix typo for tasks/access-kubernetes-api/configure-aggregation-layer.md (#18652)

* Unify runtime references (#18493)

- Use the glossary to correctly reference runtimes
- Updated runtime class documentation for CRI-O
- Removed rktlet from runtimes since its EOL

Signed-off-by: Sascha Grunert <sgrunert@suse.com>

* Clean up admission controller deprecation example (#18399)

* sync zh-trans content/zh/docs/concepts/workloads/pods/ephemeral-containers.md (#18883)

* Remove redundant information when deploy flannel on kubernetes include windows node (#18272)

* sync zh-trans content/zh/docs/concepts/workloads/pods/pod-overview.md (#18882)

* partial fix for for SEE ALSO section under content/zh/docs/reference/setup-tools/kubeadm/generated/ need to be deleted (#18879)

* see also removed from file 36

* see also removed from file 37

* see also removed from file 38

* see also removed from file 39

* see also removed from file 40

* update zh content/zh/docs/contribute/style/write-new-topic.md (#18859)

* sync zh-trans /docs/concepts/_index.md and /docs/concepts/example-concept-template.md (#18863)

* See also removed file 56 & 57 (#18912)

* see also removed file 56

* see also removed file 57

* Third Korean L10n Work For Release 1.17 (#18915)

* Changed some words in the IPv4/IPv6 dual-stack korean doc. (#18668)

* Update to Outdated files in dev-1.17-ko.3 branch. (#18580)

* Translate content/ko/docs/concepts/services-networking/service in Korean (#18195)

* Translate docs/tasks/access-application-cluster/port-forward-access-application-cluster.md in Korean (#18721)

* Translate controllers/garbage-collection.md in Korean. (#18595)

Co-Authored-by: Seokho Son <shsongist@gmail.com>
Co-Authored-by: Lawrence Kay <lkay9495@hotmail.com>
Co-Authored-by: Jesang Myung <jesang.myung@gmail.com>
Co-Authored-by: Claudia J.Kang <claudiajkang@gmail.com>
Co-Authored-by: Yuk, Yongsu <ysyukr@gmail.com>
Co-Authored-By: June Yi <june.yi@samsung.com>

Co-authored-by: Yuk, Yongsu <ysyukr@gmail.com>
Co-authored-by: Seokho Son <shsongist@gmail.com>
Co-authored-by: Lawrence Kay <me@lkaybob.pe.kr>
Co-authored-by: Jesang Myung <jesang.myung@gmail.com>
Co-authored-by: June Yi <june.yi@samsung.com>

* clean up makefile, config (#18517)

Added target for createversiondirs (shell script) in Makefile.

updates for tagged release

regenerate api ref, rm Makefile_temp

add parens to pip check

* Improve Russian translation of Home page (#17841)

* Improve Russian translation of Home page

* Update i18n/ru.toml

Co-Authored-By: Slava Semushin <slava.semushin@gmail.com>

* Update content/ru/_index.html

Co-Authored-By: Slava Semushin <slava.semushin@gmail.com>

* Update content/ru/_index.html

Co-Authored-By: Slava Semushin <slava.semushin@gmail.com>

Co-authored-by: Slava Semushin <slava.semushin@gmail.com>

* update ref link for v1.16 (#18837)

Related to issue #18820.

remove links to prev API refs

* Cleanup user journeys related configs and scripts (#18814)

* See also removed file 81 to 85 (#18909)

* see also removed file 81

* see also removed file 82

* see also removed file 83

* see also removed file 84

* see also removed file 85

* See also removed file 65 to 70 (#18908)

* see also removed file 65

* see also removed file 66

* see also removed file 67

* see also removed file 68

* see also removed file 69

* see also removed file 70

* Translate Task index page into Polish (#18876)

Co-Authored-By: Karol Pucyński <kpucynski@gmail.com>
Co-Authored-By: Michał Sochoń <kaszpir@gmail.com>

Co-authored-by: Karol Pucyński <9209870+kpucynski@users.noreply.github.com>
Co-authored-by: Michał Sochoń <kaszpir@gmail.com>

* Document dry-run authorization requirements (#18235)

* Document dry-run write access requirement.

- Add section on dry-run authorization
- Refer to dry-run authorization for diff
- Consistently hyphenate dry-run

* Update content/en/docs/reference/using-api/api-concepts.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* reword storage release note to match the change in k/k PR #87090 (#18921)

* sync zh-trans content/zh/docs/concepts/workloads/controllers/ttlafterfinished.md (#18868)

* See also removed file 60 to 63 (#18907)

* see also removed file 60

* see also removed file 61

* see also removed file 62

* see also removed file 63

* See also removed file 91 to 95 (#18910)

* see also removed file 91

* see also removed file 93

* see also removed file 94

* see also removed file 95

* content/zh/docs/concepts/workloads/pods/podpreset.md (#18870)

* fix: fixed eating initial 2 spaces inside code. (#18914)

* Update Calico section of kubeadm install guide (#18821)

* Update Calico section of kubeadm install guide

* Address review feedback

* See also removed file 96 to 100 (#18911)

* see also removed file 96

* see also removed file 97

* see also removed file 98

* see also removed file 99

* see also removed file 100

* repair zh docs in kubeadm (#18949)

* repair zh docs about kubeadm (#18950)

* Update apparmor.md (#18951)

* Update basic-stateful-set.md (#18952)

* Add missing hyperlink for pod-overhead (#18936)

* Update service.md (#18480)

make article reads more smoothly

* zh-trans update content/zh/docs/concepts/workloads/controllers/deploy… (#18657)

* zh-trans update content/zh/docs/concepts/workloads/controllers/deployment.md

* zh-trans update content\zh\docs\concepts\workloads\controllers\deployment.md

* Update source-ip documentation (#18760)

* sync zh-trans /docs/concepts/workloads/pods/pod.md (#18880)

* sync zh-trans /docs/concepts/workloads/controllers/cron-jobs.md and /docs/concepts/workloads/controllers/daemonset.md (#18864)

* sync zh-trans content/zh/docs/concepts/workloads/controllers/ttlafterfinished.md (#18867)

* Add a French version of Secret concept page (#18604)

* Add a French version of Secret concept page

* Fix

* Fix

* Update content/fr/docs/concepts/configuration/secret.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Fix

* Update content/fr/docs/concepts/configuration/secret.md

Co-Authored-By: Aurélien Perrier <aperrier@universe.sh>

* Fix

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Aurélien Perrier <aperrier@universe.sh>

* (refactor): Corrections (grammatical) in service.md file (#18944)

* Update service.md

* Fixed the invaild changes

Signed-off-by: Udit Gaurav <uditgaurav@gmail.com>

* Update container-runtimes.md (#18608)

for debian install of docker, also install gnupg2 for apt-key add to work

* Fix that dual-stack does not require Kubenet specifically (#18924)

* Fix that dual-stack does not require Kubenet specifically

Rather it requires a network plugin that supports dual-stack, and
others are available, including Calico.

* Update content/en/docs/tasks/network/validate-dual-stack.md

Added link to doc about network plugins

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Revert "Configurable Scaling for the HPA (#18157)" (#18963)

This reverts commit 5dbfaafe1a.

* Update horizontal-pod-autoscale-walkthrough.md (#18960)

Update command for creating php-apache deployment due to the following warning: `kubectl run --generator=deployment/apps.v1 is DEPRECATED and will be removed in a future version. Use kubectl run --generator=run-pod/v1 or kubectl create instead.`

* doc: add link for type=LoadBalancer service in tutorial. (#18916)

* Typo fix (#18830)

* sync zh-trans content/zh/docs/concepts/workloads/controllers/statefulset.md (#18869)

* Revise pull request template (#18744)

* Revise pull request template

* Reference compiled docs in PR template

Refer readers to https://k8s.io/contribute/start/

This keeps the template short, and it lets Hugo use templating for
the current version.

* Update certificates.md (#18970)

* Add web-ui-dashboard to French (#17974)

* Add web-ui-dashboard to French

* Update content/fr/docs/tasks/access-application-cluster/web-ui-dashboard.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/fr/docs/tasks/access-application-cluster/web-ui-dashboard.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Fix

* Fix

* Fix

* Update content/fr/docs/tasks/access-application-cluster/web-ui-dashboard.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Added a translated code of conduct (#18981)

* Added a translated code of conduct

* fixed some minor mistakes and capitalization

* Moved to informal speech

* Translate the contribute advanced page to French (#13425)

* Translate the contribute advanced page to French

* Corrections

* Correction

* Correction

* Correction

* Correction

* Correction

* Fix typo in hello-minikube.md (#18991)

* Add note for LB behaviour for cordoned nodes. (#18784)

* Add note for LB behaviour for cordoned nodes.

See also https://github.com/kubernetes/kubernetes/issues/65013
This is a reasonably common pitfall: `kubectl cordon <all nodes>` will also drop all LB traffic to the cluster, but this is not documented anywhere but in issues, when found it is usually already too late.

* Update with feedback

* Add KIND as the options for spinning up a test kubernetes environment (#17860)

* fix typo in /ja/docs/concepts/workloads/pods/init-containers (#18997)

* hide some original comments in translate docs (#18986)

* hide original comment

* hide some original comments

* Fix code of conduct title (#19006)

* Added a note about built-in priority-classes (#18979)

* Added a note about build-in priority-classes

* Update content/en/docs/concepts/configuration/pod-priority-preemption.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Add description for TTL (#19001)

* Fix whitespace on deployment page (#18990)

* Add details to the API deprecations blog post (#19014)

* Document list/map/structType and listMapKeys (#18977)

These markers where introduced to describe topology of lists, maps,
structs - primarily in support of server-side apply.

Secondarily, a small typo fix:)

* Remove "Unschedulable" pod condition type from the pod lifecycle docs (#18956)

The pod lifecycle documentation erroneously indicated `Unschedulable` as a possible `type` of pod condition. That's not true. Only four condition types exist. The `Unschedulable` value is not a type, but one of the possible reasons of the `PodScheduled` condition type.

* Revise “Encrypting Secret Data at Rest” (#18810)

* Drop reference to old Kubernetes versions

At the time of writing, Kubernetes v1.13 is the oldest supported
version, and encryption-at-rest is no longer alpha.

* Tidy whitespace

* Add table caption

* Set metadata for required Kubernetes version

* maintain the current relative path when switching to other site versions (#18871)

* Update kubectl create configmap section (#18885)

* Add common examples to Service Topology documentation (#18712)

* service topology: add missing 'enabling service topology' page

Signed-off-by: Andrew Sy Kim <kiman@vmware.com>

* service topology: add common examples

Signed-off-by: Andrew Sy Kim <kiman@vmware.com>

* updating contrib for ref docs (#18787)

more cleanup

* fix translate docs format (#19018)

* Update nodes.md (#19019)

* Translate Contribute index page into Russian (#19022)

* Added german translation for Addons page (#19010)

* Added german translation for Addons page

* Smaller adjustments

* removed a english leftover-sentence
* consistent spelling of "Add-Ons"

* Removed english entry for CoreDNS

* Update content/de/docs/concepts/cluster-administration/addons.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Translated a heading

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* (fix) Removed `-n test` from `kubectl get pv` command (#18877)

- PV are cluster scoped rather than namespaced scope
    - So, there is no need to list it by namespace

Signed-off-by: Aman Gupta <aman.gupta@mayadata.io>

* Link to setup page about Kind (#18996)

Link from /docs/setup/ to /docs/setup/learning-environment/kind/ now
that the target page exists.

* Create Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md (#18808)

* Create Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Taylor Dolezal <onlydole@users.noreply.github.com>

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-Authored-By: Bob Killen <killen.bob@gmail.com>

* Update Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

* Update and rename Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md to 2020-02-07-Deploying-External-OpenStack-Cloud-Provider-With-Kubeadm.md

Co-authored-by: Bob Killen <killen.bob@gmail.com>
Co-authored-by: Taylor Dolezal <onlydole@users.noreply.github.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Kaitlyn Barnard <kaitlynbarnard10@gmail.com>

* Revise glossary entry for Device Plugin (#16291)

* Document control plane monitoring (#17578)

* Document control plane monitoring

* Update content/en/docs/concepts/cluster-administration/monitoring.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/docs/concepts/cluster-administration/monitoring.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Merge controller-metrics.md into monitoring.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Document none driver compatibility with non docker runtime. (#17952)

* Refined unclear sentence on 3rd party dependencies (#18015)

* Refined unclear sentence on 3rd party dependencies

I reworded the sentence on third party dependencies a bit in order to make it more sound

* Update content/en/docs/concepts/security/overview.md

Sounds much better

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Improve network policies concept (#18091)

* Adopt website style guidelines

* Tweak wording

Co-Authored-By: cmluciano <cmluciano@cruznet.org>

* Make sample NetworkPolicies downloadable

Co-authored-by: cmluciano <cmluciano@cruznet.org>

* clean up secret generators (#18320)

* Use built-in version check & metadata (#18542)

* Reword kubelet live reconfiguration task (#18629)

- Revise version requirements
- Use glossary tooltips in summary
- Use sentence case for headings
- Write kubelet in lowercase where appropriate
- Add “What's next” section

* fix: add dns search record limit note. (#18913)

* Remove duplicate content: Roles & Responsibilities (#18920)

* Remove duplicate content: Roles & Responsibilities

Signed-off-by: Celeste <celeste@cncf.io>
Address feedback

Signed-off-by: Celeste <celeste@cncf.io>

* Apply suggestions from review

Co-Authored-By: Zach Corleissen <zacharysarah@users.noreply.github.com>

* Link to contribution guidelines

Signed-off-by: Celeste Horgan <celeste@cncf.io>

* Address PR feedback

Signed-off-by: Celeste Horgan <celeste@cncf.io>

Co-authored-by: Zach Corleissen <zacharysarah@users.noreply.github.com>

* Fix of pull request #18960 (#18974)

* Fix of pull request #18960

* Add yaml configuration file snippets

* Remove redundant code snippet for  command

* Update cheatsheet.md (#18975)

* Update cheatsheet.md

"List all pods in the namespace, with more details" command corrected by adding --all-namespaces

* Update content/en/docs/reference/kubectl/cheatsheet.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Correct description of Knitter CNI plugin (#18983)

* Add Elastic metricbeat to examples of DaemonSets and rename logstash (#19024)

* Add Elastic metricbeat to examples of DaemonSets

The URL points to the docs related to how to configure metricbeat on k8s

* Filebeat is the next thing

* Separated commands from output (#19023)

* Update KubeCon URLs (#19027)

The URLs had changed (and were being redirected). Also, added parameters to better identify the traffic source.

* remove see also and close issue (#19032)

* sync zh-trans content/zh/docs/concepts/workloads/controllers/garbage-collection.md (#18865)

* zh trans /docs/reference/access-authn-authz/extensible-admission-controllers.md (#18856)

* Update zh/docs/concepts/services-networking/dns-pod-service.md#pods (#18992)

* Adding contribution best practice in contribute docs (#18059)

* Add kubectl patch example with quotes on Windows (#18853)

* Add kubectl patch example with quotes on Windows

When running the `kubectl patch` example, on Windows systems you get an
error when passing the patch request in single quotes. Passing it in
double quotes with the inner ones escaped produced the desired behavior
as is in the example given for Linux systems. I've added a small note
for Windows users to have that in mind.

Signed-off-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>

* Use Hugo note shortcode

Windows note is placed inside a
[shortcode](https://kubernetes.io/docs/contribute/style/style-guide/#shortcodes)
to be consistent with the style guide.

Signed-off-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>

* Remove shell Markdown syntax

I've removed the shell syntax from the Windows example and have changed
the description to be the same as the one used in
[jsonpath](https://kubernetes.io/docs/reference/kubectl/jsonpath/)
document to be more consistent. The jsonpath example uses cmd syntax,
though it is note inside a note shortcode, therefore I've opted out of
using any syntax as it seems to break rendering inside the shortcode.

Signed-off-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>

* Add cmd markdown syntax and fix order list

I've tested this locally with `make docker-serve` on my Linux machine
and finally things are looking better, I've managed to address these two
issues:

- the Windows example is now inside `note` shortcode and also the cmd
syntax renders correctly on the page

- the list of steps broke after the first one, I've indented a paragraph
and now the steps are in the expected order

Signed-off-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>

* Remove command prompt from example

According to the [style guide](https://kubernetes.io/docs/contribute/style/style-guide/#don-t-include-the-command-prompt), the command prompt should not be included when showing an example. This commit removes it for consistency with the style guide.

Signed-off-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>

* cleanup /docs/concepts/workloads/pods/pod-lifecycle/ (#19009)

* update nodes.md (#18987)

将“用量低”更改为“可用量低”,避免歧义

* Remove command prompt from Windows example (#18906)

* Remove command prompt from Windows example

According to the [style
guide](https://kubernetes.io/docs/contribute/style/style-guide/#don-t-include-the-command-prompt),
the command prompt should not be included in the examples. Removing the
Windows command prompt from the jsonpath example.

Signed-off-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>

* Put Windows example inside note shortcode

I'm putting the Windows example in a Hug note shortcode to be consistent
with the rest of the documentation.

Signed-off-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>

* Updated CHANGELOG-11 link (#19036)

* update command used to create deployment (#19005)

The previous one was showing a deprecation warning when used.

* Update Korean localization guide (#19004)

rev1-Update Korean localization guide

* docs: fix broken etcd's official documents link (#19021)

* Update automated-tasks-with-cron-jobs.md (#19043)

Co-authored-by: Xin Chen <xchen@opq.com.au>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: lemon <lemonli@users.noreply.github.com>
Co-authored-by: Slava Semushin <slava.semushin@gmail.com>
Co-authored-by: Olivier Cloirec <5033885+clook@users.noreply.github.com>
Co-authored-by: inductor <kohei.ota@zozo.com>
Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>
Co-authored-by: Samuel Kihahu <kihahu@users.noreply.github.com>
Co-authored-by: Takuma Hashimoto <takuma-hashimoto@freee.co.jp>
Co-authored-by: Keita Akutsu <kakts.git@gmail.com>
Co-authored-by: Masa Taniguchi <maabou512@gmail.com>
Co-authored-by: Soto Sugita <sotoiwa@gmail.com>
Co-authored-by: Kozzy Hasebe <48105562+hasebe@users.noreply.github.com>
Co-authored-by: kazuaki harada <canhel.4suti50y.salamander@gmail.com>
Co-authored-by: Shunsuke Miyoshi <s.miyoshi@jp.fujitsu.com>
Co-authored-by: hato wang <26351545+wyyxd2017@users.noreply.github.com>
Co-authored-by: xieyanker <xjsisnice@gmail.com>
Co-authored-by: zhouya0 <50729202+zhouya0@users.noreply.github.com>
Co-authored-by: littleboy <zhaoze01@inspur.com>
Co-authored-by: camper42 <camper.xlii@gmail.com>
Co-authored-by: Dominic Yin <hi@ydcool.me>
Co-authored-by: Steve Bang <stevebang@gmail.com>
Co-authored-by: Zach Corleissen <zacharysarah@users.noreply.github.com>
Co-authored-by: Ryan McGinnis <ryanmcginnis@users.noreply.github.com>
Co-authored-by: Shunde Zhang <shunde.p.zhang@gmail.com>
Co-authored-by: Bob Killen <killen.bob@gmail.com>
Co-authored-by: Taylor Dolezal <onlydole@users.noreply.github.com>
Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
Co-authored-by: Eugenio Marzo <eugenio.marzo@yahoo.it>
Co-authored-by: Kaitlyn Barnard <kaitlynbarnard10@gmail.com>
Co-authored-by: TimYin <shiguangyin@inspur.com>
Co-authored-by: Shivang Goswami <shivang.goswami@infosys.com>
Co-authored-by: Fabian Baumanis <fabian.baumanis@gmx.de>
Co-authored-by: Rémy Léone <remy.leone@gmail.com>
Co-authored-by: chentanjun <tanjunchen20@gmail.com>
Co-authored-by: helight <helight@helight.info>
Co-authored-by: Jie Shen <drfish.me@gmail.com>
Co-authored-by: Joe Betz <jpbetz@google.com>
Co-authored-by: Danni Setiawan <danninov@users.noreply.github.com>
Co-authored-by: GoodGameZoo <gaoguangze111@gmail.com>
Co-authored-by: makocchi <makocchi@gmail.com>
Co-authored-by: babang <prabangkoro@users.noreply.github.com>
Co-authored-by: Sharjeel Aziz <sharjeel.aziz@gmail.com>
Co-authored-by: Wojtek Cichoń <wojtek.cichon@protonmail.com>
Co-authored-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>
Co-authored-by: Maciej Filocha <12587791+mfilocha@users.noreply.github.com>
Co-authored-by: Michał Sochoń <kaszpir@gmail.com>
Co-authored-by: Yudi A Phanama <11147376+phanama@users.noreply.github.com>
Co-authored-by: Giovan Isa Musthofa <giovanism@outlook.co.id>
Co-authored-by: Park Sung Taek <tjdxor8223@gmail.com>
Co-authored-by: Kyle Smith <kylessmith@protonmail.com>
Co-authored-by: craigbox <craig.box@gmail.com>
Co-authored-by: Afrizal Fikri <laser.survivor@gmail.com>
Co-authored-by: Gede Wahyu Adi Pramana <tokekbesi@gmail.com>
Co-authored-by: Anshu Prateek <333902+anshprat@users.noreply.github.com>
Co-authored-by: Sergei Zyubin <sergei@crate.io>
Co-authored-by: Christoph Blecker <admin@toph.ca>
Co-authored-by: Brad Topol <btopol@us.ibm.com>
Co-authored-by: Venkata Harshavardhan Reddy Allu <venkataharshavardhan_ven@srmuniv.edu.in>
Co-authored-by: KYamani <yamani.kamel@gmail.com>
Co-authored-by: Trishank Karthik Kuppusamy <33133073+trishankatdatadog@users.noreply.github.com>
Co-authored-by: Jacky Wu <Colstuwjx@gmail.com>
Co-authored-by: Gerasimos Dimitriadis <gedimitr@gmail.com>
Co-authored-by: Rajat Toshniwal <rnt.rajat@gmail.com>
Co-authored-by: Josh Soref <jsoref@users.noreply.github.com>
Co-authored-by: Sascha Grunert <sgrunert@suse.com>
Co-authored-by: wawa <xiaozhang0210@hotmail.com>
Co-authored-by: Claudia J.Kang <claudiajkang@gmail.com>
Co-authored-by: Yuk, Yongsu <ysyukr@gmail.com>
Co-authored-by: Seokho Son <shsongist@gmail.com>
Co-authored-by: Lawrence Kay <me@lkaybob.pe.kr>
Co-authored-by: Jesang Myung <jesang.myung@gmail.com>
Co-authored-by: June Yi <june.yi@samsung.com>
Co-authored-by: Karen Bradshaw <kbhawkey@gmail.com>
Co-authored-by: Alexey Pyltsyn <lex61rus@gmail.com>
Co-authored-by: Karol Pucyński <9209870+kpucynski@users.noreply.github.com>
Co-authored-by: Julian V. Modesto <julianvmodesto@gmail.com>
Co-authored-by: Jeremy L. Morris <jeremylevanmorris@gmail.com>
Co-authored-by: Casey Davenport <caseydavenport@users.noreply.github.com>
Co-authored-by: zhanwang <zhanw15@gmail.com>
Co-authored-by: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Co-authored-by: harleyliao <357857613@qq.com>
Co-authored-by: ten2ton <50288981+ten2ton@users.noreply.github.com>
Co-authored-by: Aurélien Perrier <aperrier@universe.sh>
Co-authored-by: UDIT GAURAV <35391335+uditgaurav@users.noreply.github.com>
Co-authored-by: Rene Luria <rene@luria.ch>
Co-authored-by: Neil Jerram <neiljerram@gmail.com>
Co-authored-by: Arjun <arjunrn@users.noreply.github.com>
Co-authored-by: Katarzyna Kańska <katarzyna.m.kanska@gmail.com>
Co-authored-by: Laurens Versluis <lfdversluis@users.noreply.github.com>
Co-authored-by: Ray76 <rayfoo55@gmail.com>
Co-authored-by: Alexander Zimmermann <7714821+alexzimmer96@users.noreply.github.com>
Co-authored-by: Christian Meter <cmeter@googlemail.com>
Co-authored-by: MMeent <boekewurm@gmail.com>
Co-authored-by: RA489 <rohit.anand@india.nec.com>
Co-authored-by: Akira Tanimura <autopp.inc@gmail.com>
Co-authored-by: Patouche <Patouche@users.noreply.github.com>
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Maria Ntalla <maria.ntalla@gmail.com>
Co-authored-by: Marko Lukša <marko.luksa@gmail.com>
Co-authored-by: John Morrissey <jwm@horde.net>
Co-authored-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
Co-authored-by: ngsw <ngsw@ngsw.jp>
Co-authored-by: Aman Gupta <aman.gupta@mayadata.io>
Co-authored-by: Marek Siarkowicz <marek.siarkowicz@protonmail.com>
Co-authored-by: tom1299 <tom1299@users.noreply.github.com>
Co-authored-by: cmluciano <cmluciano@cruznet.org>
Co-authored-by: Celeste Horgan <celeste@cncf.io>
Co-authored-by: Prasad Honavar <prasadhonavar@gmail.com>
Co-authored-by: Sam <sammcj@users.noreply.github.com>
Co-authored-by: Victor Martinez <victormartinezrubio@gmail.com>
Co-authored-by: Dan Kohn <dan@linuxfoundation.org>
Co-authored-by: vishakha <54327666+vishakhanihore@users.noreply.github.com>
Co-authored-by: liyinda246 <liyinda0000@163.com>
Co-authored-by: Kabir Kwatra <kabir@kwatra.me>
Co-authored-by: Armand Grillet <2117580+armandgrillet@users.noreply.github.com>
Co-authored-by: Junwoo Ji <jydrogen@gmail.com>
Co-authored-by: rm <rajib.jolite@gmail.com>

* Revert "Repair and sync the dev-1.18 branch" (#19228)

* Add capture statement (#19237)

* Update hugepages documentation (#19008)

* Update hugepages documentation

- described support for multiple huge page sizes
- described container isolation of the huge pages

* Add HugePageStorageMediumSize description

* update description for container isolation of hugepages

Signed-off-by: Byonggon Chun <bg.chun@samsung.com>

Co-authored-by: Byonggon Chun <bg.chun@samsung.com>

* User documentation for Priority and Fairness (/flowcontrol) API (#19319)

Adds an entry to the Concepts section that gives an overview of the feature
and builds upon the generated API documentation.

Also adds a Glossary entry for shuffle sharding.

Co-Authored-By: Tim Bannister <tim@scalefactory.com>
Co-Authored-By: Mike Spreitzer <mspreitz@us.ibm.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Mike Spreitzer <mspreitz@us.ibm.com>

* doc: ContainerD on Windows alpha (#19208)

* Taint based eviction promoted to GA in 1.18 (#19302)

* Updating Windows RunAsUserName page to reflect feature going GA (#19016)

* Document server-side dry-run is GA in 1.18 (#19549)

* Update dry-run docs.

* Promote server-side dry-run feature state to stable in 1.18
* Replace --dry-run with --dry-run=server|client|none accordingly
* Update server-side dry-run blog post

* Update content/en/docs/reference/using-api/api-concepts.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Address comments

* Add note at end of server-side dry-run blogpost

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* ServiceAccountIssuerDiscovery: Add user facing documentation (#19328)

Extends the documentation on configuring service accounts to include
details on the ServiceAccountIssuerDiscovery feature.

* Immutable secrets doc (#19297)

* Placeholder PR for CSIDriver promotion to GA (#19354)

* pod-overhead: updates for beta (#19059)

* pod-overhead: updates for beta

Signed-off-by: Eric Ernst <eric.ernst@intel.com>

* pod-overhead: update documentation for beta

Signed-off-by: Eric Ernst <eric@amperecomputing.com>

* Update Topology Manager for 1.18 (#19050)

* [WIP] Update Topology Manager for 1.18

Move from Alpha to Beta.
Remove Known Limitation - fixed in 1.18.

* Nit: Update content/en/docs/tasks/administer-cluster/topology-manager.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Add section on feature gate with version guidance.

* Add Known Limitation on Memory/Hugepages

* Update content/en/docs/tasks/administer-cluster/topology-manager.md

Clean up wording of known limitations

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Edits to feature gate description based on review

* Up date feature gates table.

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Updating docs for EndpointSlice changes in 1.18 (#19316)

* Adding documentation to cover ingress v1beta updates (#19231)

Co-authored-by: Rob Scott <robertjscott@google.com>

* Raw block volume GA (#19338)

* Raw block volume GA

Feature BlockVolume reaches GA in 1.17

* Add volumeMode overview

* Promote Pod Topology Spread to Beta (#18969)

* Promote PodTopologySpread (a.k.a EvenPodsSpread) to beta in 1.18

* address comments

* Default Topology Spread constraints (#19170)

* Add usage of default constraints for Pod Topology Spread.

Signed-off-by: Aldo Culquicondor <acondor@google.com>

* Add apiVersion and kind

Signed-off-by: Aldo Culquicondor <acondor@google.com>

* Unify debug pod docs and update for `kubectl alpha debug` (#19093)

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Adding AppProtocol documentation for 1.18 (#19317)

* Update kubeadm for Windows (#19217)

* Start updates for DaemonSet approach

* Rough first draft

* Remove old image assets

* Document how to fetch the correct version of kube-proxy

* Remove InstallNSSM script

It was merged into the PrepareNode script

* Update links to sig-windows-tools release files

Using the latest tag so we can continue to update things as needed
without needing to keep updating the docs

* Add upgrade tutorial for Windows kubeadm nodes

* Clarify which machine each command should be run from

* Add link from main tutorial, small edits

- Rename file / title
- Remove reviewers

* Remove IP management section

User can just rely on the defaults from kube-proxy and flannel now, or
change them in the same manner as on Linux

* Apply suggestions from code review

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* More review updates

* Switch to task template

* Apply suggestions from code review

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* More review feedback

* Adjust upgrading title

* Additional edits

* Move to kubeadm directory

* Remove stale link

This guide never had any real content about the pause image

* Add redirect from old url

* Fix weights

* Update Windows intro

* Apply suggestions from code review

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Fix typo

* Add beta markers

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Document using multiple scheduler profiles (#19172)

* Add instructions for using multiple scheduling profiles.

Signed-off-by: Aldo Culquicondor <acondor@google.com>

* Move scheduling policies and profiles to Reference

Signed-off-by: Aldo Culquicondor <acondor@google.com>

* Renames and nits

Signed-off-by: Aldo Culquicondor <acondor@google.com>

* Fix links and grammar

Signed-off-by: Aldo Culquicondor <acondor@google.com>

* Fix link and flag usage

Signed-off-by: Aldo Culquicondor <acondor@google.com>

* Update PVCDataSource to GA (#19318)

Update docs to reflect GA status for PVCDataSources in the 1.18 release.

* Update scheduler framework document (#19606)

* Update scheduler framework document

* address comments

* Add page redirect and keep old link anchors

* address comment

* Document recursive chown feature (#19391)

* Add placeholder docs for recursive chown feature

* Update content/en/docs/concepts/policy/pod-security-policy.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/docs/concepts/policy/pod-security-policy.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Address feedback

* Move recursive chown docs to correct place

* Address review feedback

* Apply suggestions from code review

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* move bit about ephemental volumes to note

* Update content/en/docs/tasks/configure-pod-container/security-context.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Doc update for GMSA promotion to Stable (#19349)

Signed-off-by: Deep Debroy <ddebroy@docker.com>

* Document generic data sources feature (#19315)

* Document AnyVolumeDataSource feature gate

* Update content/en/docs/reference/command-line-tools-reference/feature-gates.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Remove link to deprecated cluster monitoring (#18193)

* CertificateSigningRequest doc updates (#19290)

* Add CSR doc outline

* Add CertificateSigningRequest document content

Co-authored-by: James Munnelly <james.munnelly@jetstack.io>

* Update Docker installation instructions to use v19.03.8 (#19643)

* kubeadm: update upgrade documentation for 1.18 (#19551)

* 1.18 Server-side apply (#19286)

* Clarify content-type and tracking of all objects

* Update content/en/docs/reference/using-api/api-concepts.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* SSA: Improve a couple of sentences

Co-authored-by: Kevin Wiesmueller <kwiesmueller@seibert-media.net>
Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Drop feature availability from Reserve Compute Resources (#19593)

* Drop feature availability section

This section does not fit with the website style guide.

* State task version requirements

Follow website style guide for stating these.

* Revise CertificateSigningRequest documentation (#19698)

* Revise CertificateSigningRequest approval & rejection details

API clients can deny CSRs. Document this and tidy the page.
"There is currently not a mechanism for a signer implementation to report
its inability to sign a request." seemed misleading; clients can set
status.

* Tidy page

Co-Authored-By: Jordan Liggitt <jordan@liggitt.net>

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>

* Remove trailing spaces from it documents (#16790)

* fix format error (#19118)

* Add a theme-color (#18976)

* Fourth Korean L10n Work For Release 1.17 (#19127)

* translate assign-pod-node.md (#18955)
* correct the misspelling (#19063)
* Update to Outdated files in dev-1.17-ko.4 branch. (#19002)

Co-Authored-By: KimMJ <a01083612486@gmail.com>
Co-Authored-By: forybm <forybm1@naver.com>
Co-Authored-By: Yuk, Yongsu <ysyukr@gmail.com>

Co-authored-by: KimMJ <a01083612486@gmail.com>
Co-authored-by: forybm <forybm1@naver.com>
Co-authored-by: Yuk, Yongsu <ysyukr@gmail.com>

* hidden original annotation (#19126)

* Correct note shortcode for run-replicated-stateful-application.md (#19132)

* Update Korean glossary for l10n (#19094)

* Update Korean glossary for l10n

* Update content/ko/docs/contribute/localization_ko.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Issue with k8s.io/docs/tasks/access-application-cluster/configure-access-multiple-clusters/ (#18560)

* Add localization guide specific to Polish language (#18985)

Co-Authored-By: Karol Pucyński <kpucynski@gmail.com>
Co-Authored-By: Tim Bannister <tim@scalefactory.com>
Co-Authored-By: Michał Sochoń <kaszpir@gmail.com>

Co-authored-by: Karol Pucyński <9209870+kpucynski@users.noreply.github.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Michał Sochoń <kaszpir@gmail.com>

* Polish zh translation for taint-and-toleration (#19133)

* Add missing "in" for DeploymentSpec link (#19135)

* Add latest-semver shortcode (#19110)

* Remove extra note in note shortcode (#19131)

* Remove extra note in note shortcode

* Translate Inline Markdown and HTML section

* update zh-trans content/zh/docs/concepts/policy/resource-quotas.md (#19037)

* A few tweaks to wording (#19136)

Just a few tweaks where words were missing, etc.

* Prune Bradamant3 from permissions (#19084)

* Translate Start contributing page into Russian (#19124)

* Upgrade command of homebrew installs minikube (#18281)

* Update installation of minikube on macOS (#19143)

Installation through brew cask install minikube is no longer supported, as there is not such a binary. Corrected to brew install minikube works.

* Tidy “Participating in SIG Docs” (#19151)

- Fix broken link
- Move localization work from Reviewers group to Anyone
- Minor other tidying

* Change Kontainer to Node (#19105)

* Translate Participating in SIG Docs page into Russian (#19150)

* Translate Participating in SIG Docs page into Russian

* Fixes

* Second Japanese l10n work for release-1.16 (#19157)

* update install kubeadm related doc (#18826)

* modify terminology mechanism (#19148)

* latin phrase removed (#19180)

* kubeadm: add TS guide note about CoreOS read-only /usr (#19166)

* kubeadm: add TS guide note about CoreOS read-only /usr

* Update content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Latin Abbreviations "vs" Updated to "versus" (#19181)

* grep -lR ' vs ' ./content/en/docs | xargs sed -i '' -e 's/ vs / versus /g'

* Update content/en/docs/concepts/configuration/overview.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/docs/concepts/policy/resource-quotas.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Announce the contributor summit schedule (#19174)

* Announce the contributor summit schedule

Signed-off-by: Jorge O. Castro <jorgec@vmware.com>

* Fix minor nits found during review

Signed-off-by: Jorge O. Castro <jorgec@vmware.com>

* Update content/en/blog/_posts/2020-02-18-Contributor-Summit-Amsterdam-Schedule-Announced.md

Make the map URL easier to read.

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Add contributor summit image

Signed-off-by: Jorge O. Castro <jorgec@vmware.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Fix Invalid link in readme section (#19178)

* Fix inital alpha version of ValidateProxyRedirects (#19192)

See: https://github.com/kubernetes/kubernetes/pull/88260

* Add missing space in documentation line (#19013)

* Reword “Creating a single control-plane cluster with kubeadm” (#18939)

* Consolidate words of caution about Pod network

* Tweak wording

- use tooltips
- fix a TODO hyperlink
- adopt style guidelines

* Revise prerequisites for kubeadm

* Rework page structure

- Replace some headings with anchor elements (preserving inbound links)
- Use a "discussion" section for the discussion part of the page.
- Make Feedback be a part of the What's Next section
- Skip mentioning Docker in a logging context; provide generic
  signposting instead.
- Update overview
- Document limitations and fix link to HA topology
- Fixes for styling

* Redo network plugin info

* Use glossary tooltips to introduce terms

* Kill all federation v1 related tasks pages. (#17949)

* Resource name constraints (1) (#19106)

xref: #17969, #19099, #18746

* doc: remove tasks federation index from tasks main page. (#19205)

* Update output of creating replicaset in controllers/replicaset (#19088)

* Fix Invalid link in readme (en) (#19204)

* Added 'ClaimRef' to make documentation clearer (#17914)

* added final period (.)
* removed backticks

Co-authored-by: Leonardo Di Donato <leodidonato@gmail.com>
Signed-off-by: Dan POP <dan.papandrea@sysdig.com>

Co-authored-by: Leo Di Donato <leodidonato@gmail.com>

* Change back cronjob timezone note to UTC (#18715)

* Fix ambiguous translation in kubeadm.md (#19201)

* Fix tooltip (#19794)

* Add kubectl diff in kustomize (#19586)

* Tidy RuntimeClass page for v1.18 (#19578)

* Tidy RuntimeClass page for v1.18

* Reword heading

Co-authored-by: Irvi Firqotul Aini <irvi.fa@gmail.com>
Co-authored-by: zhouya0 <50729202+zhouya0@users.noreply.github.com>
Co-authored-by: Lubomir I. Ivanov <lubomirivanov@vmware.com>
Co-authored-by: Kubernetes Prow Robot <k8s-ci-robot@users.noreply.github.com>
Co-authored-by: Arjun <arjunrn@users.noreply.github.com>
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
Co-authored-by: Xin Chen <xchen@opq.com.au>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: lemon <lemonli@users.noreply.github.com>
Co-authored-by: Slava Semushin <slava.semushin@gmail.com>
Co-authored-by: Olivier Cloirec <5033885+clook@users.noreply.github.com>
Co-authored-by: inductor <kohei.ota@zozo.com>
Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>
Co-authored-by: Samuel Kihahu <kihahu@users.noreply.github.com>
Co-authored-by: Takuma Hashimoto <takuma-hashimoto@freee.co.jp>
Co-authored-by: Keita Akutsu <kakts.git@gmail.com>
Co-authored-by: Masa Taniguchi <maabou512@gmail.com>
Co-authored-by: Soto Sugita <sotoiwa@gmail.com>
Co-authored-by: Kozzy Hasebe <48105562+hasebe@users.noreply.github.com>
Co-authored-by: kazuaki harada <canhel.4suti50y.salamander@gmail.com>
Co-authored-by: Shunsuke Miyoshi <s.miyoshi@jp.fujitsu.com>
Co-authored-by: hato wang <26351545+wyyxd2017@users.noreply.github.com>
Co-authored-by: xieyanker <xjsisnice@gmail.com>
Co-authored-by: littleboy <zhaoze01@inspur.com>
Co-authored-by: camper42 <camper.xlii@gmail.com>
Co-authored-by: Dominic Yin <hi@ydcool.me>
Co-authored-by: Steve Bang <stevebang@gmail.com>
Co-authored-by: Zach Corleissen <zacharysarah@users.noreply.github.com>
Co-authored-by: Ryan McGinnis <ryanmcginnis@users.noreply.github.com>
Co-authored-by: Shunde Zhang <shunde.p.zhang@gmail.com>
Co-authored-by: Bob Killen <killen.bob@gmail.com>
Co-authored-by: Taylor Dolezal <onlydole@users.noreply.github.com>
Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
Co-authored-by: Eugenio Marzo <eugenio.marzo@yahoo.it>
Co-authored-by: Kaitlyn Barnard <kaitlynbarnard10@gmail.com>
Co-authored-by: TimYin <shiguangyin@inspur.com>
Co-authored-by: Shivang Goswami <shivang.goswami@infosys.com>
Co-authored-by: Fabian Baumanis <fabian.baumanis@gmx.de>
Co-authored-by: Rémy Léone <remy.leone@gmail.com>
Co-authored-by: chentanjun <tanjunchen20@gmail.com>
Co-authored-by: helight <helight@helight.info>
Co-authored-by: Jie Shen <drfish.me@gmail.com>
Co-authored-by: Joe Betz <jpbetz@google.com>
Co-authored-by: Danni Setiawan <danninov@users.noreply.github.com>
Co-authored-by: GoodGameZoo <gaoguangze111@gmail.com>
Co-authored-by: makocchi <makocchi@gmail.com>
Co-authored-by: babang <prabangkoro@users.noreply.github.com>
Co-authored-by: Sharjeel Aziz <sharjeel.aziz@gmail.com>
Co-authored-by: Wojtek Cichoń <wojtek.cichon@protonmail.com>
Co-authored-by: Mariyan Dimitrov <mariyan.dimitrov@gmail.com>
Co-authored-by: Maciej Filocha <12587791+mfilocha@users.noreply.github.com>
Co-authored-by: Michał Sochoń <kaszpir@gmail.com>
Co-authored-by: Yudi A Phanama <11147376+phanama@users.noreply.github.com>
Co-authored-by: Giovan Isa Musthofa <giovanism@outlook.co.id>
Co-authored-by: Park Sung Taek <tjdxor8223@gmail.com>
Co-authored-by: Kyle Smith <kylessmith@protonmail.com>
Co-authored-by: craigbox <craig.box@gmail.com>
Co-authored-by: Afrizal Fikri <laser.survivor@gmail.com>
Co-authored-by: Gede Wahyu Adi Pramana <tokekbesi@gmail.com>
Co-authored-by: Anshu Prateek <333902+anshprat@users.noreply.github.com>
Co-authored-by: Sergei Zyubin <sergei@crate.io>
Co-authored-by: Christoph Blecker <admin@toph.ca>
Co-authored-by: Brad Topol <btopol@us.ibm.com>
Co-authored-by: Venkata Harshavardhan Reddy Allu <venkataharshavardhan_ven@srmuniv.edu.in>
Co-authored-by: KYamani <yamani.kamel@gmail.com>
Co-authored-by: Trishank Karthik Kuppusamy <33133073+trishankatdatadog@users.noreply.github.com>
Co-authored-by: Jacky Wu <Colstuwjx@gmail.com>
Co-authored-by: Gerasimos Dimitriadis <gedimitr@gmail.com>
Co-authored-by: Rajat Toshniwal <rnt.rajat@gmail.com>
Co-authored-by: Josh Soref <jsoref@users.noreply.github.com>
Co-authored-by: Sascha Grunert <sgrunert@suse.com>
Co-authored-by: wawa <xiaozhang0210@hotmail.com>
Co-authored-by: Claudia J.Kang <claudiajkang@gmail.com>
Co-authored-by: Yuk, Yongsu <ysyukr@gmail.com>
Co-authored-by: Seokho Son <shsongist@gmail.com>
Co-authored-by: Lawrence Kay <me@lkaybob.pe.kr>
Co-authored-by: Jesang Myung <jesang.myung@gmail.com>
Co-authored-by: June Yi <june.yi@samsung.com>
Co-authored-by: Karen Bradshaw <kbhawkey@gmail.com>
Co-authored-by: Alexey Pyltsyn <lex61rus@gmail.com>
Co-authored-by: Karol Pucyński <9209870+kpucynski@users.noreply.github.com>
Co-authored-by: Julian V. Modesto <julianvmodesto@gmail.com>
Co-authored-by: Jeremy L. Morris <jeremylevanmorris@gmail.com>
Co-authored-by: Casey Davenport <caseydavenport@users.noreply.github.com>
Co-authored-by: zhanwang <zhanw15@gmail.com>
Co-authored-by: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Co-authored-by: harleyliao <357857613@qq.com>
Co-authored-by: ten2ton <50288981+ten2ton@users.noreply.github.com>
Co-authored-by: Aurélien Perrier <aperrier@universe.sh>
Co-authored-by: UDIT GAURAV <35391335+uditgaurav@users.noreply.github.com>
Co-authored-by: Rene Luria <rene@luria.ch>
Co-authored-by: Neil Jerram <neiljerram@gmail.com>
Co-authored-by: Katarzyna Kańska <katarzyna.m.kanska@gmail.com>
Co-authored-by: Laurens Versluis <lfdversluis@users.noreply.github.com>
Co-authored-by: Ray76 <rayfoo55@gmail.com>
Co-authored-by: Alexander Zimmermann <7714821+alexzimmer96@users.noreply.github.com>
Co-authored-by: Christian Meter <cmeter@googlemail.com>
Co-authored-by: MMeent <boekewurm@gmail.com>
Co-authored-by: RA489 <rohit.anand@india.nec.com>
Co-authored-by: Akira Tanimura <autopp.inc@gmail.com>
Co-authored-by: Patouche <Patouche@users.noreply.github.com>
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Maria Ntalla <maria.ntalla@gmail.com>
Co-authored-by: Marko Lukša <marko.luksa@gmail.com>
Co-authored-by: John Morrissey <jwm@horde.net>
Co-authored-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
Co-authored-by: ngsw <ngsw@ngsw.jp>
Co-authored-by: Aman Gupta <aman.gupta@mayadata.io>
Co-authored-by: Marek Siarkowicz <marek.siarkowicz@protonmail.com>
Co-authored-by: tom1299 <tom1299@users.noreply.github.com>
Co-authored-by: cmluciano <cmluciano@cruznet.org>
Co-authored-by: Celeste Horgan <celeste@cncf.io>
Co-authored-by: Prasad Honavar <prasadhonavar@gmail.com>
Co-authored-by: Sam <sammcj@users.noreply.github.com>
Co-authored-by: Victor Martinez <victormartinezrubio@gmail.com>
Co-authored-by: Dan Kohn <dan@linuxfoundation.org>
Co-authored-by: vishakha <54327666+vishakhanihore@users.noreply.github.com>
Co-authored-by: liyinda246 <liyinda0000@163.com>
Co-authored-by: Kabir Kwatra <kabir@kwatra.me>
Co-authored-by: Armand Grillet <2117580+armandgrillet@users.noreply.github.com>
Co-authored-by: Junwoo Ji <jydrogen@gmail.com>
Co-authored-by: rm <rajib.jolite@gmail.com>
Co-authored-by: zacharysarah <zach@corleissen.com>
Co-authored-by: Byonggon Chun <bg.chun@samsung.com>
Co-authored-by: Jonathan Klabunde Tomer <jktomer@google.com>
Co-authored-by: Mike Spreitzer <mspreitz@us.ibm.com>
Co-authored-by: Patrick Lang <PatrickLang@users.noreply.github.com>
Co-authored-by: Jan Chaloupka <jchaloup@redhat.com>
Co-authored-by: Mark Rossetti <marosset@microsoft.com>
Co-authored-by: Julian V. Modesto <julian.modesto@liveramp.com>
Co-authored-by: Michael Taufen <mtaufen@users.noreply.github.com>
Co-authored-by: Wojciech Tyczynski <wojtekt@google.com>
Co-authored-by: Christian Huffman <chuffman@redhat.com>
Co-authored-by: Eric Ernst <eric@amperecomputing.com>
Co-authored-by: Conor Nolan <conor.nolan@intel.com>
Co-authored-by: Rob Scott <robertjscott@google.com>
Co-authored-by: cmluciano <cmluciano@us.ibm.com>
Co-authored-by: Jan Šafránek <jsafrane@redhat.com>
Co-authored-by: Wei Huang <wei.huang1@ibm.com>
Co-authored-by: Aldo Culquicondor <1299064+alculquicondor@users.noreply.github.com>
Co-authored-by: Lee Verberne <verb@google.com>
Co-authored-by: Ben Moss <moss.127@gmail.com>
Co-authored-by: John Griffith <john.griffith8@gmail.com>
Co-authored-by: Hemant Kumar <gnufied@users.noreply.github.com>
Co-authored-by: Deep Debroy <ddebroy@docker.com>
Co-authored-by: Ben Swartzlander <ben@swartzlander.org>
Co-authored-by: Jordan Liggitt <liggitt@google.com>
Co-authored-by: James Munnelly <james.munnelly@jetstack.io>
Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
Co-authored-by: Antoine Pelisse <apelisse@google.com>
Co-authored-by: Kevin Wiesmueller <kwiesmueller@seibert-media.net>
Co-authored-by: Yushiro FURUKAWA <y.furukawa_2@fujitsu.com>
Co-authored-by: June Yi <gochist@gmail.com>
Co-authored-by: KimMJ <a01083612486@gmail.com>
Co-authored-by: forybm <forybm1@naver.com>
Co-authored-by: Kartik Sharma <52158641+Kartik494@users.noreply.github.com>
Co-authored-by: Kirk Larkin <6025110+serpent5@users.noreply.github.com>
Co-authored-by: chentanjun <2799194073@qq.com>
Co-authored-by: Felix Geelhaar <felix@felixgeelhaar.de>
Co-authored-by: Eko Simanjuntak <ecojuntak@gmail.com>
Co-authored-by: Andrew Allbright <aallbrig@gmail.com>
Co-authored-by: Jorge O. Castro <jorgec@vmware.com>
Co-authored-by: Ihor Sychevskyi <26163841+Arhell@users.noreply.github.com>
Co-authored-by: Fabian Ruff <fabian@progra.de>
Co-authored-by: Jamie Luckett <jamieluckett@googlemail.com>
Co-authored-by: Qiming Teng <tengqim@cn.ibm.com>
Co-authored-by: Kohei Toyoda <k-toyoda@pi.jp.nec.com>
Co-authored-by: Dan POP <dan.papandrea@sysdig.com>
Co-authored-by: Leo Di Donato <leodidonato@gmail.com>
Co-authored-by: Xiaokang An <anxiaokang@hotmail.com>
2020-03-25 12:00:25 -07:00
Lorenzo Paris 60a265e6bd
Update authentication.md with link to anon reqs (#19706)
Suggest adding a link in case the reader is not familiar with what "anonymous requests" means. This paragraph also includes a reference to "anonymous user," so I think the link is warranted. Thanks.
2020-03-19 11:16:36 -07:00
Tim Bannister e881e91b9a
Improve RBAC guide (#17538)
* Update to match website style guide

* Use glossary shortcodes
* Overall tidying

* Drop mention of old (unsupported) releases

* Reword RBAC notes & warnings

* Write “role bindings” as two words

* Tweak RBAC guide wording

* Tweak RBAC out-of-the-box roles table

* Mention other authorizers

There are other authorizers than RBAC and ABAC; hint that these exist
and that the API server might run with these configured.

* Fix formatting of API discovery roles

Also add table caption

* Drop incorrect reference to cluster-status

* Drop vestigial RBAC warning
2020-03-18 15:50:44 -07:00
inductor 4297f3b29c
Update nginx to modern versions (#19198)
* update nginx versions

* update

* update examples
2020-03-17 10:48:23 -07:00
Manuel Rüger 1d08290c55
AdmissionControllers: Rewrite PodTolerationRestriction (#18849)
Personally the explanation was quite difficult to understand without looking into the code.
I hope I managed to simplify it a bit and added an example how to add annotations to a
namespace so they can be consumed by the PodTolerationRestriction admission
controller.

Signed-off-by: Manuel Rüger <manuel@rueg.eu>
2020-03-15 22:04:35 -07:00
Qiming Teng e0a03c0ebd
Resource name constraints (5) (#19122)
xref: #17969, #19099, #18746
2020-03-15 21:52:36 -07:00
Tsahi Duek 5f496a6ce6
Changed 'caBundle' description (#19341)
It is not clear that the 'caBundle' field in the Mutating/Validating webhook object is used for client-side validation from the admission controller itself.
The comment which appears at the source code is much more clear --> https://github.com/kubernetes/api/blob/master/admissionregistration/v1beta1/types.go#L534-L537

My suggestion is to change the description to match the documentation which is IMO much more clear
2020-03-15 21:28:35 -07:00
Andrew Allbright 1242c008a8
Update some instances of latin abbreviation e.g. to alternative phrases (#19182) 2020-02-29 23:12:40 -08:00
Qiming Teng ceccbc049c
Resource name constraints (1) (#19106)
xref: #17969, #19099, #18746
2020-02-19 15:44:30 -08:00
Andrew Allbright 470f932dd8
Latin Abbreviations "vs" Updated to "versus" (#19181)
* grep -lR ' vs ' ./content/en/docs | xargs sed -i '' -e 's/ vs / versus /g'

* Update content/en/docs/concepts/configuration/overview.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/docs/concepts/policy/resource-quotas.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>
2020-02-19 00:14:25 -08:00
Andrew Allbright 1513a7b29a
latin phrase removed (#19180) 2020-02-18 16:42:25 -08:00
Jim Angel 834f1c6bbe
adding in a docs alias (#19077) 2020-02-11 18:42:07 -08:00
Zach Corleissen d4437d56c5
Change url to alias (#19070) 2020-02-11 00:48:02 -08:00
Jim Angel db5ddfab15
adding redir (#18834) 2020-02-10 20:02:01 -08:00
Tim Bannister 3cf7ba1092
Clean up admission controller deprecation example (#18399) 2020-01-29 15:28:14 -08:00
Mikalai Radchuk a5515a7c0e Fixes list rendering (#18499) 2020-01-07 15:07:42 -08:00
Colleen Murphy 38814ab388 Fix broken NodeRestriction anchor reference (#18225)
In 203391835d, an explicit anchor '#noderestriction' was added to the
NodeRestriction section of the Admission Controllers reference document,
which caused the link to the '#NodeRestriction' anchor in the Node
Authorization document to break and lead to the top of the Admission
Controllers document instead of to the NodeRestriction section further
down the page. This change fixes the link to point to the intended
section instead of to the whole page in general.
2020-01-03 07:39:41 -08:00
Xiang Dai f21f4b2257 Fix en language misspell (#18201)
* fix misspell

Signed-off-by: Xiang Dai <764524258@qq.com>

* clean white noise

Signed-off-by: Xiang Dai <764524258@qq.com>
2019-12-20 06:49:32 -08:00
Damini Satya dff2f7b960 Official 1.17 Release Docs (#18011)
* feat: graduate TaintNodesByCondition to GA (#17073)

* Promote StartupProbe to beta (enabled by default). (#17164)

* Watch bookmarks to GA (#17026)

* feat: graduate ScheduleDaemonSetPods to GA (#17350)

* Update Docker installation instructions (#17405)

* Use exact version numbers for installing Docker in Ubuntu (#17428)

* Move CSIMigration and CSIMigrationGCE to Beta in Kubernetes v1.17 (#17478)

* Promote NodeLease feature to GA (#17189)

* Update docs for csi topology ga (#17408)

* Update RunAsUsername to beta (#17460)

* doc:Update RunAsUsername to beta

* doc: update samples - kubernetes.io/os is no longer beta

* Updating based on review feedback

* Promote Node-specific volume limits to GA (#17432)

* Promote PodShareProcessNamespace to stable (#17192)

* Promote PodShareProcessNamespace to stable

* Add for_k8s_version to feature-state label

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Readd version-check to shareProcessNamespace task

* Update service load balancer finalizer doc for GA (#17438)

* Update Topology Manager docs (#17451)

* Added information on how device plugins can take advantage
of Topology Manager
* Updated the Topology Manager documentation to include additionalinformation and update some out of date sections

* Fix broken Topology Manager link (#17746)

Part of What's Next Device Plugin section

* Update CRD defaulting docs for GA (#17450)

* Add documentation for VolumeSnapshot Beta (#17233)

* Updating EndpointSlice documentation for beta release in 1.17 (#17411)

* (docs/dualstack): v1.17 updates (#17457)

* Add placehold doc updates for dualstack in 1.17

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* Add Downward API and /etc/hosts Pod IP validation

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* remove addressed known issue via k/k pr 85246

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* Remove known issue and add flag as part of k/k 79993

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* remove follow up placeholders

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* Update verbiage

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* Make IP addressing consistent throughout the task

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* Update to status.podIPs

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* Update content/en/docs/tasks/network/validate-dual-stack.md

Use set instead of env

Co-Authored-By: Khaled Henidak (Kal) <khnidk@outlook.com>

* add topology.kubernetes.io/zone, topology.kubernetes.io/region and node.kubernetes.io/instance-type labels to docs (#17498)

Signed-off-by: Andrew Sy Kim <kiman@vmware.com>

* Service topology alpha documentation (#17459)

* Update list of feature flags for in-tree plugins migrated to CSI (#17533)

Signed-off-by: Deep Debroy <ddebroy@docker.com>

* Update Node concept for TaintNodesByCondition going GA (#17577)

* feat: graduate ResourceQuotaScopeSelectors to GA in 1.17 (#17554)

* kubeadm: update the upgrade documentation for 1.17 (#17587)

* doc: Simplify Windows deployments with RuntimeClass (#16697)

* doc: Simplify Windows deployments with RuntimeClass

* Updating on review feedback

* doc: Adding windows-build label from enhancement 1301

* update doc for kubelet option --reserved-cpus (#17648)

* feat: update TaintNodesByCondition in feature gates table (#17377)

* Update docs for v1 resource quota configuration (#17547)

* AdmissionConfiguration v1 (#17548)

* Update WebhookAdmissionConfiguration examples (#17549)

* Update AWS EBS Migration Feature state (#16126)

* Add resource version section to api-concepts documentation (#16910)

* Add Resource Version semantics section to api concepts

* Clarify risks of going back in time, add details about compaction and watch cache sizes

* Apply suggestions from liggitt

Co-Authored-By: Jordan Liggitt <jordan@liggitt.net>

* remove pesudocode, apply feedback

* Fix typo

* Clarify equality rules

* Cleanup kubectl generators docs (#17609)

* Write ReplicationController without a space

* Drop mentioning unsupported cluster versions

* Fix capitalization for “API group”

* Tweak wording

* Avoid using deprecated generator in example

* add Antrea description in dev-1.17 (#17919)

* Promote VolumeSubpathEnvExpansion to GA

* Reference Documentation for the Kubernetes API for 1.17 (#18019)

* Update feature-gates.md (#18033)

* Reference Documentation for kubectl Commands for 1.17 (#18017)

* Update for v1.17 (#18034)

* Update config.toml(release-1.17) for 1.17 (#18031)
2019-12-09 16:11:29 -08:00
umiblue 3079e9b00f Update an out-of-date link (#17907)
Signed-off-by: umiblue <lentil1016@163.com>
2019-12-02 05:49:05 -08:00
Alena Varkockova 15b4194727 Fix typo in the word annotation (#17716) 2019-11-21 04:05:28 -08:00
Mitesh Jain f54a7ad16f Fix #17250 - Add details for TaintNodesByCondition. (#17313)
* Add details for TaintNodesByCondition.

* Add glossary tip for taints and improve wording for TaintNodesByCondition.
2019-11-12 01:02:10 -08:00
Oleg Butuzov 66dde86d0a fix - broken link (#17530)
Fix for broken link at admission-conrollers page.

https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#runtimeclass
2019-11-11 18:14:06 -08:00
Luzhenxing 3c26a162fb fix issue 17420 (#17439) 2019-11-05 22:23:50 -08:00
Jim Angel 647b4cd39d fixed yaml block so it renders (#17259) 2019-10-29 14:26:53 -07:00
Jordan Liggitt aad4f0bd13 Fix webhook admission example (#17179) 2019-10-27 18:15:25 -07:00
Ashish 3c88fb1c14 Add “API group” to glossary #15906 (#16192)
Created API Group glossary term
Linked glossary term to applicable pages
2019-10-23 08:42:17 -07:00
Yuk, Yongsu d437e8c6bc en: Change the full link in the document to an inline link. (#17057)
* Change the full link in the document to an inline link.

grep -r "https \: \ / \ / kubernetes \ .io" content/en/docs
Changed to inline link except the following list.
- URLs are mentioned directly in the body
- release note
- url to blog
- url to community
- Url to be redirected

* Apply suggestions from code review

Co-Authored-By: June Yi <june.yi@samsung.com>
2019-10-23 06:20:14 -07:00
aimeeu 3fdd28a96c Update UAA, Dex links in setup instructions for specific systems (#16945)
Signed-off-by: Aimee Ukasick <aimeeu.opensource@gmail.com>
2019-10-16 16:46:39 -07:00