Commit Graph

496 Commits

Author SHA1 Message Date
Eric Chiang 5d6e0ca1bb remove ericchiang from reviewers 2023-05-16 18:13:33 +00:00
Kubernetes Prow Robot edc769baa4
Merge pull request #39576 from sftim/20220108_improve_api_documentation_objects_part_1
Reorganize Working with Kubernetes Objects section
2023-05-10 18:39:09 -07:00
Kubernetes Prow Robot 7bdcd3da4c
Merge pull request #40968 from nnmin-aws/nnmin-dev
update certificate-signing-requests.md to reflect https://github.com/
2023-05-07 02:51:15 -07:00
Min Ni 35771026a1 update certificate-signing-requests.md to reflect https://github.com/kubernetes/kubernetes/pull/111660 introduced in 1.27 2023-05-05 13:15:39 -07:00
Kubernetes Prow Robot a413d89528
Merge pull request #40051 from EricFortin/patch-1
Small wording change
2023-05-05 02:51:12 -07:00
Kubernetes Prow Robot 6bf15f514b
Merge pull request #40692 from sftim/20230414_automatically_use_latest_patch_for_minor_version
Use release data to calculate latest patch version
2023-05-03 00:38:12 -07:00
Kubernetes Prow Robot f787489ec5
Merge pull request #40535 from aitorpazos/patch-1
Note on caBundle encoding in extensible-admission-controllers.md
2023-05-02 15:38:14 -07:00
Tim Bannister 50d7e85643
Migrate from fullVersion param to skew shortcode
Use {{< skew currentPatchVersion >}} to render the latest patch version
for the minor release being documented.
2023-05-02 23:25:30 +01:00
Tim Bannister 634c17f61c Reorganize Working with Kubernetes Objects section
- move Understanding Kubernetes Objects to be section overview
- within the section, consistently link to the new (moved) page from the
  first mention of “object”
- add a redirect

Co-authored-by: Divya Mohan <divya.mohan0209@gmail.com>
2023-04-29 21:39:42 +01:00
Ismail Alidzhikov eb3e564a17
Fix the comma symbol
Some unknown symbol is being used currently.
2023-04-24 10:45:46 +03:00
Qiming Teng ad7c0712c6 Fix examples test for 1.27
- Some examples are actually not good "examples", i.e. they are not
  not ready for the users to try out.
- Some examples are failing the validation in their current format.
- Some examples skipped the test case.

These issues are fixed.
2023-04-16 17:26:12 +08:00
Taahir Ahmed 4a5436f42e ClusterTrustBundles: Document service account impersonation
(Change message to retrigger tests)
2023-04-14 11:05:15 -07:00
Mickey Boxell 2e403eba90
Merge pull request #40578 from sftim/20230409_cluster_trust_bundles
Document ClusterTrustBundles
2023-04-10 16:44:03 -05:00
Mickey Boxell 9252eb08f5 Merge remote-tracking branch 'upstream/main' into dev-1.27 2023-04-10 12:20:33 -07:00
Tim Bannister e95deae997
Update CSR page to encompass CSRs and trust bundles
Rather than mention trust bundles as a subtopic of certificate signing
requests, reshape the page so that:
- it's clear that CSRs are stable but ClusterTrustBundles are alpha
- the task for issuing a certificate to a user stands separately from
  the concepts explained elsewhere in the page
- it's clear that signers are relevant to both CSRs and
  ClusterTrustBundles
2023-04-09 18:51:27 +01:00
Tim Bannister 8377a675cd
ClusterTrustBundles: Add section to certificates page
Document the API types as they exist today, plus a hint of the future
integrations that will be available.

Co-Authored-By: Taahir Ahmed <taahm@google.com>
2023-04-09 17:27:18 +01:00
朱正浩,Zhu Zhenghao c1f4c5c4a2 Cleanup page rbac 2023-04-07 22:34:42 +08:00
Aitor cf20f82dbd
Note on caBundle encoding in extensible-admission-controllers.md
The note on caBundle field description mentions it is PEM encoded, but the actual field value is then encoded into Base64, which is worth mentioning.
2023-04-06 09:10:12 +00:00
Mickey Boxell 31439e3d56 Merge branch 'upstream/main' into dev-1.27 2023-04-05 14:20:36 -05:00
朱正浩,Zhu Zhenghao 3a3ae711d5 Cleanup page rbac 2023-04-05 22:36:28 +08:00
zmquan b1bd85a421
about apiGroups (#40315)
* about apiGroups

Look at the source code, apiGroups is an empty set and not all are allowed, you need to use * to be able to, if it is an empty set if the resource does not have apiGroups then it will not be accessible

Refer to:
https://github.com/kubernetes/kubernetes/blob/master/pkg/apis/rbac/v1/evaluation_helpers.go#L85
https://github.com/kubernetes/api/blob/master/rbac/v1/types.go#L29

* Update content/en/docs/reference/access-authn-authz/rbac.md

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>

* Update rbac.md

* Update rbac.md

* Update content/en/docs/reference/access-authn-authz/rbac.md

the comma

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>

* Update rbac.md

All changed

* Update content/en/docs/reference/access-authn-authz/rbac.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

* Update content/en/docs/reference/access-authn-authz/rbac.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

* Update content/en/docs/reference/access-authn-authz/rbac.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

---------

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Qiming Teng <tengqm@outlook.com>
2023-04-04 22:01:38 -07:00
Jiahui Feng 0d862b9afe message expression and type checking. 2023-04-03 09:38:13 -07:00
Joe Betz cf37b594f2
KEP-3488 ValidatingAdmissionPolicy: Enforcement actions, audit annotations, and secondary authz (#40098)
* Document auditAnnotations, validationActions and authorizer

* Apply suggestions from code review

Co-authored-by: Qiming Teng <tengqm@outlook.com>

* Apply suggestions from code review

Co-authored-by: Tim Allclair <timallclair@gmail.com>

* Apply feedback

---------

Co-authored-by: Qiming Teng <tengqm@outlook.com>
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2023-04-03 08:55:52 -07:00
Tim Allclair 27460b23fa
AdmissionWebhookMatchConditions feature documentation (#40058)
* AdmissionWebhookMatchConditions feature documentation

* #squash ivelichkovich feedback

* #squash sftim feedback

* Correct statement about request.object

* #squash: sftim feedback

* #squash jpbetz feedback

* #squash: denied function removed

* #squash fix match conditions example

* #squash fix expression quoting

* #squash scope authorizatoin check example

* #squash separate RBAC webhook example

* #squash sftim feedback

* #squash add shared client config for example

* Don't use yaml anchors in example
2023-04-03 08:23:51 -07:00
samitks 4d58ea4165
Update service-accounts-admin.md
Fix internal links in service-accounts-admin docs
2023-04-01 13:23:50 +05:30
Kubernetes Prow Robot 2da2c6c277
Merge pull request #40407 from mickeyboxell/merged-main-dev-1.27
Merged main dev 1.27
2023-03-31 21:49:49 -07:00
samitks b0978a248e
Fix ServiceAccount admission controller link
Fix ServiceAccount admission controller link
2023-03-31 05:55:01 +05:30
Kubernetes Prow Robot b842957cf3
Merge pull request #39794 from nabokihms/ssr-beta
KEP-3325: Promote SelfSubjectReview to Beta
2023-03-30 11:39:49 -07:00
Mickey Boxell a15fa4ae31 Merge remote-tracking branch 'upstream/main' into dev-1.27 2023-03-29 15:54:33 -05:00
liulijin 669f695ccb Remove some duplicates in content/en/docs/reference/access-authn-authz/service-accounts-admin.md
Signed-off-by: liulijin <253954033@qq.com>
2023-03-23 09:25:21 +08:00
Cici Huang 350ce035a5 Fix previous virables in exampes 2023-03-22 20:23:48 +00:00
Cici Huang 457c26b997 Adding MatchConditions into ValidatingAdmissionPolicy 2023-03-22 20:23:48 +00:00
Eric Fortin 9e75d92cd9
Small wording change 2023-03-16 11:54:39 -04:00
m.nabokikh bb14c6db8d Promote SelfSubjectReview to Beta
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2023-03-12 15:09:39 +01:00
Guangwen Feng 58455c59e9 Remove duplicate "the" in admission-controllers.md
Signed-off-by: Guangwen Feng <fenggw-fnst@fujitsu.com>
2023-03-03 16:27:25 +08:00
Kubernetes Prow Robot 3fc2fa9853
Merge pull request #39142 from tengqm/cleanup-redirects-1
Remove redirect entries for docs/admin/... pages
2023-02-22 08:43:57 -08:00
Kubernetes Prow Robot ee4b88ed37
Merge pull request #37733 from sftim/20221105_update_docs_podsecuritypolicy_removal
Update documentation for PodSecurityPolicy removal
2023-02-14 12:55:51 -08:00
Richard Tweed 68b19b6f00 Specify that subresources excluded from mutating webhook example 2023-02-06 22:33:00 +00:00
Kubernetes Prow Robot c809bcc796
Merge pull request #39180 from Zhuzhenghao/certificate-signing-requests
Make layout prettier in certificate-signing-requests.md
2023-01-30 22:14:48 -08:00
zhuzhenghao 80561f67b1 Make layout prettier in certificate-signing-requests.md 2023-01-31 13:45:44 +08:00
windsonsea 4164430555 Add spaces in code snippets for consistency 2023-01-30 18:15:06 +08:00
mtardy 6c701a7d96 Update doc of admission plugin SecurityContextDeny
Note the shortcomings of the implementation of this admission plugin

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Qiming Teng <tengqm@outlook.com>
2023-01-29 17:27:12 +01:00
Qiming Teng 9a727efab8 Remove redirect entries for docs/admin/... pages 2023-01-29 19:56:56 +08:00
Tim Bannister bb85d62752 Update docs for PodSecurityPolicy removal 2023-01-24 22:24:09 +00:00
Mathieu Benoit 4ec6fbac55
Fix errors on `ValidatingAdmissionPolicyBindings` for the CEL for Admission Control blog & doc (#38893)
* Fix errors on ValidatingAdmissionPolicyBindings for the CEL for Admission Control blog

* Fix namespaceSelector error

* Fix namespaceSelector errors
2023-01-12 08:38:54 -08:00
Kubernetes Prow Robot e97c98b27f
Merge pull request #38428 from AverageMarcus/patch-1
Fix typo in SA admission controller steps
2023-01-03 17:19:58 -08:00
Qiming Teng 37955a816b Reformat the validating-admission-policy reference page
This commit wraps the long lines found in the
validating-admission-policy reference page.
2022-12-31 07:44:49 +08:00
Qiming Teng 3362aa9701 Add admission.k8s.io/v1 API and fix references to it
The `admission.k8s.io/v1` API group is not generated into the v2/v3 OpenAPI
specification as part of Kubernetes API because it is not officially "served".
However, the structs in the API group are used in other APIs that are user-facing.
This PR addes the reference API and fixes references to it.
2022-12-31 07:44:41 +08:00
Saloni1814 912c306be4
Fixing Spec -> spec and paramsRef -> paramRef
Fixing Spec -> spec and paramsRef -> paramRef
2022-12-23 18:25:22 +05:30
Yash Pimple b590431f4e
Updated the wrong format 2022-12-20 01:24:49 +05:30