Tim Bannister
672813f3e7
Move PSP into Security concepts section
...
The logical navigation definitely works better if Pod Security admission
and PodSecurityPolicy are pages in the same section. Make It So.
Co-authored-by: Rey Lejano <rlejano@gmail.com>
2022-03-30 17:30:35 +01:00
Kubernetes Prow Robot
39fd63ba12
Merge pull request #31989 from guettli/31930__fix_busybox_image_1.28
...
fix busybox image to version 1.28
2022-03-25 15:45:59 -07:00
Noppadol
ba8ab6238b
Fix link in cluster-level-pss.md
...
Missing a "/" for the link to [Pod Security Standards]
2022-03-14 17:58:26 +07:00
Drew Miller
6b21f286df
minor wording fix
2022-03-12 01:22:10 -05:00
Kubernetes Prow Robot
74c9374435
Merge pull request #32157 from tallclair/apparmor
...
Make the AppArmor docs more runtime agnostic
2022-03-11 21:32:23 -08:00
Tim Allclair
82a1d9c704
Make the AppArmor docs more runtime agnostic
2022-03-09 15:10:15 -08:00
Kubernetes Prow Robot
3bcb656e06
Merge pull request #29847 from sftim/20210928_migrate_kubectl_overview
...
Move kubectl overview to be section index
2022-03-05 13:54:52 -08:00
Kubernetes Prow Robot
90188d33b7
Merge pull request #31636 from tengqm/fix-links-2
...
Fix links and markdown format for some pages
2022-03-05 12:54:54 -08:00
Tim Bannister
73cd38cdc6
Move kubectl overview to be section index
...
Also:
- use glossary definition in page introduction
- tidy broken link in What's Next section
- update links to refer to moved page
2022-03-03 10:03:00 +00:00
Thomas Guettler
7122a4498a
fix busybox image to 1.28 (issues with `nslookup`).
...
Changes where done with these commands:
reprec 'image: busybox(?!:)' 'image: busybox:1.28' */docs */examples
reprec -- '--image=busybox(?!:)' '--image=busybox:1.28' */docs */examples
Related issues:
https://github.com/docker-library/busybox/issues/48
https://github.com/kubernetes/kubernetes/issues/66924
2022-03-02 20:48:26 +01:00
Tárikly Távora
b6f0d8ffbc
Review zookeper tutorial and fix command error ( #31914 )
...
* Misplaced command result
On zookeeper tutorial https://kubernetes.io/docs/tutorials/stateful-application/zookeeper/#surviving-maintenance command result is concatenated to the command itself:
kubectl drain $(kubectl get pod zk-1 --template {{.spec.nodeName}}) --ignore-daemonsets --force --delete-emptydir-data "kubernetes-node-ixsl" cordoned
* Review zookeeper tutorial
https://github.com/kubernetes/website/pull/31873
Review done!
2022-02-26 18:25:17 -08:00
0xff-dev
f9ac04521d
[en] update yaml docs
2022-02-23 00:32:01 +08:00
Qiming Teng
459a3f96ac
Fix links and markdown format for some pages
2022-02-05 15:19:21 +08:00
Sascha Grunert
4074c2e7c3
Improve SeccompDefault documentation
...
- Highlight that we do not change the Kubernetes API and how to verify
the used seccomp profile
- Fix the kind configuration and enhance the example with a custom
workload.
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-01-27 10:09:18 +01:00
Babapool
ec94e69c4e
Merge the tutorials under tutorials->clusters into tutorials->security
2022-01-09 21:31:20 +00:00
mtilson
5e964818e8
Remove "Service" as well
2022-01-05 02:15:41 +03:00
mtilson
3e48467a27
Remove extra command and fix reference to profile
2022-01-04 21:40:48 +03:00
Kubernetes Prow Robot
d9545116cd
Merge pull request #31184 from CodingCanuck/patch-3
...
Fix kind delete cluster commands
2022-01-04 09:10:52 -08:00
Alex McCarthy
90970b7b73
Fix kind delete cluster commands
...
The name flag requires two leading dashes, not one.
2022-01-03 07:17:52 -10:00
Alex McCarthy
6b4cbac16c
Remove trailing whitespace to fix command pasting
2022-01-03 07:03:52 -10:00
Kubernetes Prow Robot
59f7c6f39c
Merge pull request #28905 from RA489/update_cluster
...
Improvement to create cluster page
2021-12-17 07:44:29 -08:00
Pushkar Joglekar
d1e25451d3
Added shell script examples
...
Fixed nits, broken links and numbering
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
Co-authored-by: Jim Angel <jimangel@users.noreply.github.com>
2021-12-08 10:41:55 +05:30
Pushkar Joglekar
d29e93acbb
Tutorial for pod security admission
...
Refer blog post for v1.23 + suggestions from code review
2021-12-08 10:41:25 +05:30
RA489
3766686671
Improvement to create cluster page
2021-12-06 12:38:43 +05:30
Jesse Butler
018f9d05a2
Merge remote-tracking branch 'upstream/main' into dev-1.23
2021-12-01 12:23:10 -05:00
Kubernetes Prow Robot
fe2b4047db
Merge pull request #30264 from doughgle/patch-2
...
Clarify why cordon all but 4 nodes.
2021-11-25 06:54:34 -08:00
Kubernetes Prow Robot
66c07ae9ad
Merge pull request #30109 from sftim/20211016_revise_seccomp_tutorial
...
Revise seccomp tutorial
2021-11-20 10:36:59 -08:00
Jesse Butler
d330226a95
Merge remote-tracking branch 'upstream/main' into dev-1.23
2021-11-17 12:55:09 -05:00
sandipanpanda
7a513e6dee
Fix broken anchor link of #type-nodeport in service.md ( #30388 )
...
* Fix broken anchor link of #type-nodeport in service.md
* Update anchor link from #nodeport to #type-nodeport
Update anchor link from #nodeport to #type-nodeport in overview.md
* Update anchor link from #nodeport to #type-nodeport
Update anchor link from #nodeport to #type-nodeport in ingress.md
* Update anchor link from #nodeport to #type-nodeport
Update anchor link from #nodeport to #type-nodeport in troubleshooting-kubeadm.md
* Update anchor link from #nodeport to #type-nodeport
Update anchor link from #nodeport to #type-nodeport in connecting-frontend-backend.md
* Update anchor link from #nodeport to #type-nodeport
Update anchor link from #nodeport to #type-nodeport in source-ip.md
2021-11-12 08:02:28 -08:00
Hoon Jo
9ac60ec13d
Update apparmor.md
...
Due to exec command DEPRECATED. so please add `--` to avoid info message.
`Current`
```
root@wk8s-m:~# kubectl exec hello-apparmor cat /proc/1/attr/current
kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl exec [POD] -- [COMMAND] instead.
k8s-apparmor-example-deny-write (enforce)
```
```
root@wk8s-m:~# kubectl exec hello-apparmor touch /tmp/test
kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl exec [POD] -- [COMMAND] instead.
touch: /tmp/test: Permission denied
command terminated with exit code 1
```
`Change`
```
root@wk8s-m:~# kubectl exec hello-apparmor -- cat /proc/1/attr/current
k8s-apparmor-example-deny-write (enforce)
```
```
root@wk8s-m:~# kubectl exec hello-apparmor -- touch /tmp/test
touch: /tmp/test: Permission denied
command terminated with exit code 1
```
2021-11-11 16:02:04 +09:00
RA489
1ddef08a50
Improvement to create cluster page
2021-11-09 11:06:25 +05:30
Douglas Hellinger
b2035168a7
Clarify why cordon all but 4 nodes.
2021-10-27 15:58:55 +08:00
Douglas Hellinger
52fe4549f9
Update zookeeper.md
2021-10-27 10:37:34 +08:00
Douglas Hellinger
593fb144b6
Update zookeeper.md
...
kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl exec [POD] -- [COMMAND] instead.
2021-10-27 10:31:23 +08:00
Jesse Butler
4e755b2f2c
Merge remote-tracking branch 'upstream/main' into dev-1.23
2021-10-26 14:13:06 -04:00
Tim Bannister
5d5a2125c5
Use a glossary tooltip for "node"
2021-10-16 13:02:04 +01:00
Tim Bannister
ee588f6d2b
Write headings in sentence case
...
Other than page titles, headings should be sentence case
2021-10-16 13:02:04 +01:00
Tim Bannister
97a7bbcea8
Expand on runtime default part of seccomp tutorial
2021-10-16 13:02:04 +01:00
Tim Bannister
bb634e6db9
Revise seccomp tutorial
...
- Drop docs for Kubernetes earlier than v1.19
- Have kubectl fetch manifests using HTTP where suitable
- General tidying
2021-10-16 12:47:11 +01:00
Robert Martin
bd59a5fc20
Update hello-minikube.md
...
Fix minor typos
2021-09-25 20:02:10 -05:00
Kubernetes Prow Robot
859880ab75
Merge pull request #29433 from saschagrunert/seccomp-api-removal-note
...
Add note about deprecated seccomp annotation
2021-09-10 14:27:02 -07:00
Sascha Grunert
5f192f2cb1
Add note about deprecated seccomp annotation
...
We now add a note to clarify that the annotations are deprecated and
will become non-functional in v1.25.
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-08-23 10:03:10 +02:00
Sascha Grunert
61b8cafa84
Mention that privileged containers run unconfined
...
This is a note which helps users to understand the interaction between
privileged containers and seccomp profiles.
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2021-08-20 10:09:11 +02:00
Kubernetes Prow Robot
87235b508d
Merge pull request #29311 from mengjiao-liu/update-githubbranch-param
...
Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value
2021-08-16 06:03:18 -07:00
Mengjiao Liu
f945335af6
Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value
2021-08-10 18:03:21 +08:00
Kubernetes Prow Robot
5f65b4fcd0
Merge pull request #28853 from saschagrunert/seccomp-index
...
Add seccomp tutorial to index
2021-08-10 02:27:17 -07:00
Kubernetes Prow Robot
e68dc3c075
Merge pull request #28736 from chenxuc/hello-minikube-2
...
improve hello-minikube page for dashboard
2021-08-10 00:23:19 -07:00
Victor Palade
61ac44bb11
Merge master into dev-1.22 to keep in sync
2021-08-04 19:43:06 +02:00
Claudia J. Kang
d534f730cf
Fix the missing termination character with HTML5 named character reference
...
The HTML5 named character reference such as '>', '<' should be terminated
with semicolon character. This commit fixes the missing termination character
with the kubernetes-basics tutorials.
2021-08-01 00:05:16 +09:00
Victor Palade
252c44c53d
Merge master into dev-1.22 to keep in sync
2021-07-29 15:40:32 +03:00