Commit Graph

390 Commits

Author SHA1 Message Date
Tim Bannister 672813f3e7
Move PSP into Security concepts section
The logical navigation definitely works better if Pod Security admission
and PodSecurityPolicy are pages in the same section. Make It So.

Co-authored-by: Rey Lejano <rlejano@gmail.com>
2022-03-30 17:30:35 +01:00
Kubernetes Prow Robot 39fd63ba12
Merge pull request #31989 from guettli/31930__fix_busybox_image_1.28
fix busybox image to version 1.28
2022-03-25 15:45:59 -07:00
Noppadol ba8ab6238b
Fix link in cluster-level-pss.md
Missing a "/" for the link to [Pod Security Standards]
2022-03-14 17:58:26 +07:00
Drew Miller 6b21f286df
minor wording fix 2022-03-12 01:22:10 -05:00
Kubernetes Prow Robot 74c9374435
Merge pull request #32157 from tallclair/apparmor
Make the AppArmor docs more runtime agnostic
2022-03-11 21:32:23 -08:00
Tim Allclair 82a1d9c704 Make the AppArmor docs more runtime agnostic 2022-03-09 15:10:15 -08:00
Kubernetes Prow Robot 3bcb656e06
Merge pull request #29847 from sftim/20210928_migrate_kubectl_overview
Move kubectl overview to be section index
2022-03-05 13:54:52 -08:00
Kubernetes Prow Robot 90188d33b7
Merge pull request #31636 from tengqm/fix-links-2
Fix links and markdown format for some pages
2022-03-05 12:54:54 -08:00
Tim Bannister 73cd38cdc6 Move kubectl overview to be section index
Also:
- use glossary definition in page introduction
- tidy broken link in What's Next section
- update links to refer to moved page
2022-03-03 10:03:00 +00:00
Thomas Guettler 7122a4498a fix busybox image to 1.28 (issues with `nslookup`).
Changes where done with these commands:

reprec 'image: busybox(?!:)' 'image: busybox:1.28' */docs */examples
reprec -- '--image=busybox(?!:)' '--image=busybox:1.28' */docs */examples

Related issues:

 https://github.com/docker-library/busybox/issues/48
 https://github.com/kubernetes/kubernetes/issues/66924
2022-03-02 20:48:26 +01:00
Tárikly Távora b6f0d8ffbc
Review zookeper tutorial and fix command error (#31914)
* Misplaced command result

On zookeeper tutorial https://kubernetes.io/docs/tutorials/stateful-application/zookeeper/#surviving-maintenance command result is concatenated to the command itself:

kubectl drain $(kubectl get pod zk-1 --template {{.spec.nodeName}}) --ignore-daemonsets --force --delete-emptydir-data "kubernetes-node-ixsl" cordoned

* Review zookeeper tutorial

https://github.com/kubernetes/website/pull/31873

Review done!
2022-02-26 18:25:17 -08:00
0xff-dev f9ac04521d [en] update yaml docs 2022-02-23 00:32:01 +08:00
Qiming Teng 459a3f96ac Fix links and markdown format for some pages 2022-02-05 15:19:21 +08:00
Sascha Grunert 4074c2e7c3
Improve SeccompDefault documentation
- Highlight that we do not change the Kubernetes API and how to verify
  the used seccomp profile
- Fix the kind configuration and enhance the example with a custom
  workload.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-01-27 10:09:18 +01:00
Babapool ec94e69c4e Merge the tutorials under tutorials->clusters into tutorials->security 2022-01-09 21:31:20 +00:00
mtilson 5e964818e8
Remove "Service" as well 2022-01-05 02:15:41 +03:00
mtilson 3e48467a27
Remove extra command and fix reference to profile 2022-01-04 21:40:48 +03:00
Kubernetes Prow Robot d9545116cd
Merge pull request #31184 from CodingCanuck/patch-3
Fix kind delete cluster commands
2022-01-04 09:10:52 -08:00
Alex McCarthy 90970b7b73
Fix kind delete cluster commands
The name flag requires two leading dashes, not one.
2022-01-03 07:17:52 -10:00
Alex McCarthy 6b4cbac16c
Remove trailing whitespace to fix command pasting 2022-01-03 07:03:52 -10:00
Kubernetes Prow Robot 59f7c6f39c
Merge pull request #28905 from RA489/update_cluster
Improvement to create cluster page
2021-12-17 07:44:29 -08:00
Pushkar Joglekar d1e25451d3 Added shell script examples
Fixed nits, broken links and numbering

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
Co-authored-by: Jim Angel <jimangel@users.noreply.github.com>
2021-12-08 10:41:55 +05:30
Pushkar Joglekar d29e93acbb Tutorial for pod security admission
Refer blog post for v1.23 + suggestions from code review
2021-12-08 10:41:25 +05:30
RA489 3766686671 Improvement to create cluster page 2021-12-06 12:38:43 +05:30
Jesse Butler 018f9d05a2 Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-12-01 12:23:10 -05:00
Kubernetes Prow Robot fe2b4047db
Merge pull request #30264 from doughgle/patch-2
Clarify why cordon all but 4 nodes.
2021-11-25 06:54:34 -08:00
Kubernetes Prow Robot 66c07ae9ad
Merge pull request #30109 from sftim/20211016_revise_seccomp_tutorial
Revise seccomp tutorial
2021-11-20 10:36:59 -08:00
Jesse Butler d330226a95 Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-11-17 12:55:09 -05:00
sandipanpanda 7a513e6dee
Fix broken anchor link of #type-nodeport in service.md (#30388)
* Fix broken anchor link of #type-nodeport in service.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in overview.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in ingress.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in troubleshooting-kubeadm.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in connecting-frontend-backend.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in source-ip.md
2021-11-12 08:02:28 -08:00
Hoon Jo 9ac60ec13d
Update apparmor.md
Due to exec command DEPRECATED. so please add `--` to avoid info message. 

`Current`
```
root@wk8s-m:~# kubectl exec hello-apparmor cat /proc/1/attr/current
kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl exec [POD] -- [COMMAND] instead.
k8s-apparmor-example-deny-write (enforce)
``` 

```
root@wk8s-m:~# kubectl exec hello-apparmor touch /tmp/test
kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl exec [POD] -- [COMMAND] instead.
touch: /tmp/test: Permission denied
command terminated with exit code 1
```

`Change`
```
root@wk8s-m:~# kubectl exec hello-apparmor -- cat /proc/1/attr/current
k8s-apparmor-example-deny-write (enforce)
```

```
root@wk8s-m:~# kubectl exec hello-apparmor -- touch /tmp/test
touch: /tmp/test: Permission denied
command terminated with exit code 1
```
2021-11-11 16:02:04 +09:00
RA489 1ddef08a50 Improvement to create cluster page 2021-11-09 11:06:25 +05:30
Douglas Hellinger b2035168a7
Clarify why cordon all but 4 nodes. 2021-10-27 15:58:55 +08:00
Douglas Hellinger 52fe4549f9
Update zookeeper.md 2021-10-27 10:37:34 +08:00
Douglas Hellinger 593fb144b6
Update zookeeper.md
kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl exec [POD] -- [COMMAND] instead.
2021-10-27 10:31:23 +08:00
Jesse Butler 4e755b2f2c Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-10-26 14:13:06 -04:00
Tim Bannister 5d5a2125c5 Use a glossary tooltip for "node" 2021-10-16 13:02:04 +01:00
Tim Bannister ee588f6d2b Write headings in sentence case
Other than page titles, headings should be sentence case
2021-10-16 13:02:04 +01:00
Tim Bannister 97a7bbcea8 Expand on runtime default part of seccomp tutorial 2021-10-16 13:02:04 +01:00
Tim Bannister bb634e6db9 Revise seccomp tutorial
- Drop docs for Kubernetes earlier than v1.19
- Have kubectl fetch manifests using HTTP where suitable
- General tidying
2021-10-16 12:47:11 +01:00
Robert Martin bd59a5fc20
Update hello-minikube.md
Fix minor typos
2021-09-25 20:02:10 -05:00
Kubernetes Prow Robot 859880ab75
Merge pull request #29433 from saschagrunert/seccomp-api-removal-note
Add note about deprecated seccomp annotation
2021-09-10 14:27:02 -07:00
Sascha Grunert 5f192f2cb1
Add note about deprecated seccomp annotation
We now add a note to clarify that the annotations are deprecated and
will become non-functional in v1.25.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-08-23 10:03:10 +02:00
Sascha Grunert 61b8cafa84
Mention that privileged containers run unconfined
This is a note which helps users to understand the interaction between
privileged containers and seccomp profiles.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2021-08-20 10:09:11 +02:00
Kubernetes Prow Robot 87235b508d
Merge pull request #29311 from mengjiao-liu/update-githubbranch-param
Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value
2021-08-16 06:03:18 -07:00
Mengjiao Liu f945335af6 Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value 2021-08-10 18:03:21 +08:00
Kubernetes Prow Robot 5f65b4fcd0
Merge pull request #28853 from saschagrunert/seccomp-index
Add seccomp tutorial to index
2021-08-10 02:27:17 -07:00
Kubernetes Prow Robot e68dc3c075
Merge pull request #28736 from chenxuc/hello-minikube-2
improve hello-minikube page for dashboard
2021-08-10 00:23:19 -07:00
Victor Palade 61ac44bb11 Merge master into dev-1.22 to keep in sync 2021-08-04 19:43:06 +02:00
Claudia J. Kang d534f730cf Fix the missing termination character with HTML5 named character reference
The HTML5 named character reference such as '&gt', '&lt' should be terminated
with semicolon character. This commit fixes the missing termination character
with the kubernetes-basics tutorials.
2021-08-01 00:05:16 +09:00
Victor Palade 252c44c53d Merge master into dev-1.22 to keep in sync 2021-07-29 15:40:32 +03:00