Commit Graph

99 Commits

Author SHA1 Message Date
Tim Bannister a21c43eed9 Tidy & reword Secret concept
Co-authored-by: Chris Negus <cnegus@redhat.com>
Co-authored-by: Rey Lejano <rlejano@gmail.com>
2022-03-08 15:55:39 +00:00
Tim Bannister 3530caab63 Revise list of Secret types 2022-03-08 15:55:19 +00:00
Jordan Liggitt f7b4ca4d1c Fixup service account token doc 2022-02-24 14:04:40 -05:00
Jordan Liggitt 3d15ef3810 Stop recommending people scrape auto-generated service account tokens 2022-02-23 13:28:02 -05:00
Vivek Koppuru 4f9f1dccfc Fix wording of basic auth secret doc to keep it consistent with validation 2021-11-05 18:18:03 +05:30
Kubernetes Prow Robot 92d8d1e966
Merge pull request #28733 from Kartik494/dockerserver
Add docker server registry
2021-09-30 22:03:21 -07:00
Kubernetes Prow Robot 7331e54c09
Merge pull request #28623 from chenxuc/staticPod
static pod not support configmap or secret
2021-08-10 03:23:17 -07:00
Tim Bannister 97c35ce770 Update links from Secret concept to relevant API reference 2021-08-04 22:35:56 +01:00
chenxuc 8c9c9c543c static pod not support configmap or secret 2021-07-27 14:51:45 +08:00
Tim Bannister 7a8389ccc2 Revise wording for Secret concept 2021-07-24 02:23:27 +01:00
kartik494 cb712cdcd1 Add commit for hostname 2021-07-14 23:52:22 +05:30
Kubernetes Prow Robot 8e737b26da
Merge pull request #27933 from toshokan/secrets-typo
[en] Fix secret -> secrets in titles
2021-07-10 18:34:46 -07:00
Yuval Avrahami 338139971f Remove an outdated risk regarding secrets 2021-07-05 20:42:08 +03:00
kartik494 c1dc2b074f Add docker server registry 2021-07-01 13:05:52 +05:30
Niko Felger 5bb726ba16
Fix typo 2021-05-18 10:29:09 +02:00
Zulai Wang 1753d09792 Fix typo in secret.md 2021-05-16 15:15:29 +08:00
toshokan c860159ea8
[en] Fix secret -> secrets in titles 2021-05-10 22:07:40 -04:00
Tim Bannister 965aa51daf Merge master into dev-1.21 to keep in sync, plus latest API reference
This sync merge includes API reference updates.
2021-04-06 21:38:24 +01:00
Qiming Teng 79845b0c4a Add kubelet config reference
This is a reference for kubelet config generated from
github.com/tengqm/genref tool using the following command:

./genref -include kubelet-config
2021-04-01 21:53:14 +08:00
Victor Palade ca046d9b1f Merge master into dev-1.21 to keep in sync 2021-03-26 21:29:52 +01:00
Karen Bradshaw 3ff5ec1eff clean up use of word: just 2021-03-17 19:57:40 -04:00
Victor Palade 70096affc5 Merge remote-tracking branch 'upstream/master' into dev-1.21 2021-03-05 17:05:24 +01:00
Kubernetes Prow Robot 7d051f9a09
Merge pull request #25459 from amyXia1994/patch-1
Update secret.md
2021-02-27 17:52:38 -08:00
Kubernetes Prow Robot 12dd36ef3d
Merge pull request #26488 from ChandaniM123/merged-master-dev-1.21
Merged master into dev 1.21 - 2/12/21
2021-02-13 00:41:04 -08:00
wojtekt 507dc0aa20 Promote immutable secrets and configmaps to GA 2021-02-12 16:11:40 +01:00
Karen Bradshaw 3fd65482e8 clean up use of word: simply 2021-02-07 12:15:29 -05:00
Jacob Henner c59e3f0c27 Remove ServiceAccount Secret automounting section
The "Automatic mounting of manually created Secrets" section of the
Secrets documentation previously suggesting using PodPresets. PodPresets
have been removed, there is no alternate facility described, and it's
unclear if auto-mounting secrets based on associations with
ServiceAccounts was ever supported. Accordingly, the section should be
removed.
2021-02-03 22:38:20 -05:00
Federico Gallo 329574f250
syntax
Replaced An for A
2021-01-31 18:53:53 -03:00
Kubernetes Prow Robot e30a9bb3d9
Merge pull request #26169 from tomkivlin/tomkivlin-secret-style
Update secret.md to match style guide
2021-01-26 11:18:31 -08:00
Bartlomiej Takuski 48004c99cc
Grammatical error in secret.md
Fixing a minor grammatical error in secret.md
2021-01-22 16:02:48 -06:00
Tom Kivlin aec6ea4895
Update secret.md
Remove prepended URLs and re-word to avoid use of "we".
2021-01-20 10:23:49 +00:00
Kubernetes Prow Robot 216ca3f06b
Merge pull request #24930 from adamhjk/patch-1
Explain the insecure by default nature of secrets
2021-01-16 19:47:43 -08:00
Qiming Teng a11047c153 Clean PodPreset docs, examples and links 2021-01-14 13:26:29 +08:00
Karen Bradshaw 0166a0b08e add docs for version shortcodes 2021-01-12 17:20:33 -05:00
lostsquirrel 89b3cc978b
change token_id to token-id 2020-12-23 16:48:01 +08:00
Kubernetes Prow Robot 77362e21ec
Merge pull request #25498 from adambkaplan/ssh-auth-secret-caution
Caution Note for ssh-auth Secrets
2020-12-16 13:50:31 -08:00
Kubernetes Prow Robot 5e1e6196f2
Merge pull request #25027 from scoulomb-dup-fork/secret-env-var
Env var are not updated after a secret update
2020-12-08 21:26:50 -08:00
Sylvain Coulombel d77262740b Env var are not updated after a secret update 2020-12-08 21:12:03 +01:00
Adam Kaplan 7b80f63dbc Caution Note for ssh-auth Secrets
Adds a `caution` note that SSH key pairs do not establish trust between
clients and servers. A secondary method is required to establish trust
between an SSH client and host server, such as fixed `known_hosts` file.
Clients which do not establish adequate trust are vulnerable to "man in
the middle" impersonation attacks.

Signed-off-by: Adam Kaplan <adam.kaplan@redhat.com>
2020-12-08 12:21:08 -05:00
amyXia1994 75cd79a136
Update secret.md
fix minor syntax error
2020-12-07 21:28:37 +08:00
Adam Jacob f2a9a3ef81 Explain the insecure by default nature of secrets
This PR adds a paragraph explaining the insecure by default nature of k8s secrets, and points users at the documentation to turn on encryption at rest and RBAC.

I think a second page needs to be created showing the correct combination of RBAC rules for various cases, which should eventually replace the link to the RBAC documentation.
2020-12-02 12:49:02 -08:00
Qiming Teng 72a2bafb47 [zh] Resync docs/concepts/configuration/secret.md 2020-11-26 13:36:27 +08:00
Qiming Teng ab58775702 Add secret type documentation 2020-10-29 09:26:44 +08:00
Kubernetes Prow Robot c901c84e55
Merge pull request #23782 from tengqm/create-secret-tasks
Separating tasks from Secret concept
2020-09-13 17:20:57 -07:00
Qiming Teng 995b067fdb Separating tasks from Secret concept
There are many contents in the (*very big*) Secret concept page which
are actually tasks. This PR proposes a separation of some contents
into separate tasks, so that we have a (hopefully) better organization
of the content and we make room for improvement to the concept itself.

Note that the creation of the `configmap-secret` directory (instead of
`secret`) is an intent to create a folder for both ConfigMap and Secret,
both of which are about configurations though there are quite some
differences between them.
2020-09-13 21:06:58 +08:00
Tim Bannister b5b9d88433 Add headings for Immutable ConfigMaps and Secrets 2020-09-06 16:03:35 +01:00
Sascha Grunert 91f4a125c0
Remove the feature gate part from immutable secrets/configmaps
The feature is in `beta` since Kubernetes v1.19.0 so it is enabled per
default. This means that we can omit the hint to enable the feature
gate manually.

Signed-off-by: Sascha Grunert <sgrunert@suse.com>
2020-09-01 14:32:18 +02:00
Kubernetes Prow Robot 70b75e16f0
Merge pull request #22981 from shuuji3/en/replace-special-quote-with-normal-ones
Replace special quote characters with normal ones
2020-08-26 14:55:02 -07:00
Savitha Raghunathan 95c94c03d5 resolving conflicts 2020-08-23 12:13:37 -04:00
Jerry Park 05e11bb98d Fix issue with k8s.io/docs/concepts/configuration/secret/ 2020-08-12 04:41:34 +00:00