Commit Graph

82 Commits

Author SHA1 Message Date
Andrei Ivantsov 633e85b9ca
Update apparmor.md 2024-12-04 11:29:16 +01:00
Andrei Ivantsov f3e97aac9c
Use jsonpath to extract hostname for AppArmor profile distribution
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2024-12-04 11:23:54 +01:00
Andrei Ivantsov 66fba26914
Fix collection of node host names for apparmor profile distribution 2024-12-03 22:23:26 +01:00
Zadjad Rezai b55400ab9a
Fix typo in apparmor.md 2024-09-28 23:13:30 +02:00
Aaina26 50bddee591 Fixed a dead link in AppArmor doc 2024-07-18 11:13:48 +05:30
windsonsea 983eab4732 Fix lists in apparmor.md 2024-05-10 16:22:33 +08:00
Kubernetes Prow Robot ea4444a849
Merge pull request #43214 from shannonxtreme/apparmor-seccomp
Add new page for kernel-level constraints
2024-04-30 04:56:15 -07:00
Shannon Kularathna 610753c768 Add page for kernel-level security concepts 2024-04-17 17:00:13 -04:00
Tim Allclair 4f11f83a45 AppArmor v1.30 docs update 2024-03-19 14:25:06 -07:00
Tim Allclair e6be053f74 Make AppArmor docs conform to style guide 2024-03-08 10:52:16 -08:00
Tim Allclair 49ace75b78 Refresh AppArmor documentation 2024-03-07 16:05:43 -08:00
Delta X 310a1221ac
[en] Update cluster-level-pss.md show the code sample what user will apply
Add code sample link to show what user will apply.
2023-11-30 01:22:58 +08:00
yanggang ad52e828b5
Fix KinD typos in en docs.
Signed-off-by: yanggang <gang.yang@daocloud.io>
2023-11-08 22:12:26 +00:00
dancer13 1d7e34fcf2
refactor(content.en.docs.tutorials.security.SecComp): add sha to kindes/node image 2023-10-31 09:48:12 +01:00
dancer1325 7df7e9dd7e fix(content.en.docs.tutorials.security.SecCommp): switch to newer kindes/node version 2023-10-30 18:17:20 +01:00
PranitRout07 9b302b4da2
Ensure all letters in kind are in lowercase
I have found the word 'kind' is written like 'KinD'.So i have changed all the letters in 'KinD' to lowercase.
2023-09-29 07:19:35 +05:30
Mengjiao Liu e8b136c3b3 Use code_sample shortcode instead of code shortcode 2023-09-05 17:10:14 +08:00
Qiming Teng 07f224714a Fix links
This PR fixes some link errors as discovered by the `linkchecker.py` tool.
2023-08-31 21:11:57 +08:00
Tim Bannister a56d96f4b6 Use code shortcode for Tutorials section
Replace legacy codenew shortcode with code shortcode.
2023-07-31 14:43:14 +01:00
Marcelo Giles ee171ac8c8
Fix runtime sentence 2023-07-28 10:38:04 -07:00
Marcelo Giles 2c31509aa9
Merge branch 'main' into 31536_seccomp_tutorial_add_prereqs 2023-07-25 12:16:22 -07:00
Andrey Goran eb522c126f
Replace {{< codenew ... >}} with {{% codenew ... %}} in all English docs (#42180)
* Replaced {{< codenew ... >}} with {{% codenew ... %}} in all files

* Reverted changes in non-english localizations
2023-07-25 05:54:06 -07:00
Kubernetes Prow Robot dd9c5380f3
Merge pull request #39961 from Dhairya-Arora01/addLine
Improvement for the security docs
2023-07-10 18:21:11 -07:00
Dhairya Arora df2613671a
Update content/en/docs/tutorials/security/_index.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2023-07-10 18:50:04 +05:30
Marcelo Giles 2a642c11de
Add docker prereq, mention podman and rearrange sections 2023-07-10 01:04:41 -07:00
AmarNathChary bfeaca1b59 removed hyperlink in restrict a container 2023-05-16 10:45:31 +05:30
Tim Bannister 50d7e85643
Migrate from fullVersion param to skew shortcode
Use {{< skew currentPatchVersion >}} to render the latest patch version
for the minor release being documented.
2023-05-02 23:25:30 +01:00
Sascha Grunert 3648d983c6
[KEP-2413] Add docs for SeccompDefault graduation
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-03-27 13:45:50 +02:00
Dhairya-Arora01 7ea1ad7bef
Update content/en/docs/tutorials/security/_index.md
Co-authored-by: Nitish Kumar <justnitish06@gmail.com>
2023-03-16 21:58:22 +05:30
Dhairya-Arora01 3cc3620a0c a little change 2023-03-13 14:28:30 +00:00
Dhairya-Arora01 1336d6d838 Changed tThe o Kubernetes project instead of we 2023-03-13 14:22:49 +00:00
Dhairya-Arora01 5e058fdc42 Improvement for the security docs 2023-03-13 07:37:03 +00:00
Mickey Boxell 987edf7ef0 Merge remote-tracking branch 'upstream/main' into dev-1.27 2023-03-06 19:22:46 -06:00
Tim Bannister 3c8df5ea55 Mention that cluster-level PSA config might not be possible
Some managed clusters don't let you configure PSA cluster wide, and
users might not realize this unless we tell them.
2023-03-02 22:39:41 +00:00
Tim Bannister c9640ebc32 Make it clear that PSA example Pods do start OK
The reader sees a warning, but the Pods do run. That detail might not be
obvious otherwise.
2023-03-02 22:39:41 +00:00
Tim Bannister a39ee496fe Tidy PSA tutorials
Various tidying to match website style guide better.
2023-03-02 22:39:41 +00:00
Tim Bannister 25a926e465 Assume that kind provides Pod Security Admission
Given that Pod Security Admission has been beta and then generally
available for a while, assume that kind gives the reader a cluster than
includes this feature.
2023-03-02 22:39:41 +00:00
Tim Bannister c38e5c00fb Avoid creating local manifest for PSA tutorials
The kubectl tool includes a client for fetching manifests using HTTP,
and we usually rely on that for tutorials. Switch to an approach where
we don't create a manifest on the filesystem and then apply that.
2023-03-02 22:39:41 +00:00
Kubernetes Prow Robot 3a7fab6118
Merge pull request #39630 from reylejano/merged-main-dev-1.27
Merged main into dev-1.27 branch
2023-02-24 04:55:38 -08:00
Kubernetes Prow Robot 24cde2766a
Merge pull request #39103 from windsonsea/lvlpss
Fix indentations in cluster-level-pss.md
2023-01-27 02:44:26 -08:00
Michael bfc82d5f9f Fix indentations in cluster-level-pss.md 2023-01-27 11:04:26 +08:00
shubham82 9ae7378b1a Resolved nit. 2023-01-26 11:43:25 +09:00
shubham82 07995d0fab Improved the content Flow. 2023-01-26 11:26:52 +09:00
shubham82 d3e7c23d07 Improvement: Added shell code block snippet to the commands. 2023-01-23 16:38:22 +09:00
Sascha Grunert c1bf88e71e
Update seccomp docs for v1.27
seccomp annotation will become non-functional in v1.27, which will be
now reflected in the documentation as well.

Ref: https://github.com/kubernetes/kubernetes/pull/114947

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-01-18 14:28:07 +01:00
Abigail McCarthy 06b957d01d Update page weights in tutorial/security section 2023-01-10 11:42:58 -05:00
Parthava Adabala aa08044428
Fix: Grammar
Corrected subject verb disagreement.
2022-10-25 17:32:10 +05:30
Thomas Balthazar 0e31a40737
Update deprecated kubectl command in apparmor doc
Running `kubectl exec <pod_name> <command>` is deprecated:
```
kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl exec [POD] -- [COMMAND] instead
```
It should be: `kubectl exec <pod_name> -- <command>`
2022-10-08 11:31:58 +02:00
Kubernetes Prow Robot 031f87ed5f
Merge pull request #36501 from liggitt/podsecurity-ga
Update pod security configuration docs for v1
2022-09-20 07:23:20 -07:00
Alex Pakalniskis 61ce6e27ef
Fix cluster cleanup command 2022-09-10 12:28:01 -07:00