Commit Graph

389 Commits

Author SHA1 Message Date
Sean Wei 34155fed0b Fix links for k/design-proposals-archive
The contributors/design-proposals in k/community was removed. It's only
available in k/design-proposals-archive repo now.

This commit also changes https://github.com/kubernetes/repo/blob/master/file.md
to https://git.k8s.io/repo/file.md for better consistency.
2022-06-10 22:49:04 +08:00
Guangwen Feng ef08c345e0 Fix an incorrect link in psp-to-pod-security-standards.md
Signed-off-by: Guangwen Feng <fenggw-fnst@fujitsu.com>
2022-06-08 11:40:04 +08:00
Kubernetes Prow Robot 090803440d
Merge pull request #33130 from tengqm/move-kubelet-authn-authz
Move kubelet authn authz
2022-06-07 19:11:49 -07:00
Kubernetes Prow Robot 11d56aacf6
Merge pull request #34076 from kadtendulkar/kad4
Update  content/en/docs/reference/access-authn-authz/bootstrap-tokens.md
2022-05-31 17:33:02 -07:00
Rishit Dagli 0be2557ecd Fix CertificateSubjectRestriction in Admission Controllers docs 2022-05-31 19:35:12 +00:00
kadtendulkar 6c82e81ede Update content/en/docs/reference/access-authn-authz/bootstrap-tokens.md 2022-05-31 22:02:36 +05:30
wei.wang 1cf774a05e [zh]Update content/zh/docs/reference/access-authn-authz/admission-controllers.md 2022-05-24 02:26:02 +08:00
Qiming Teng c992c4c04f Add imagepolicy.v1alpha1 API 2022-05-18 14:20:20 +08:00
Qiming Teng 90a395745d Cleanup admission-controllers page
This PR fixes several things in the admission-controllers page:

- The `PodSecurity` plugin is enabled by default, but it was not listed so;
- The `apiserver.config.k8s.io/v1alpha1` has been deprecated since v1.17, we are still documenting it side by side with the `apiserver.config.k8s.io/v1` API group;
- The `eventratelimit.admission.k8s.io/v1alpha1` API could use a better reference rather than the design doc; **The imagepolicy.v1alpha1 API is not documented anywhere, I'll add it later on.**
- There are statements about future, which should be removed;
- We are supposed refer to the `LimitRage` API reference rather than pointing users to the design docs;
- We are supposed refer to the `ResourceQuota` API reference rather than pointing users to the design docs;
- There are long lines in the page source which could have been wrapped properly.
2022-05-17 15:37:58 +08:00
Nate W 5ead53b3e8 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-05-02 10:29:49 -07:00
xin.li b831e96c6a [en] modify debug-cluster/audit
Signed-off-by: xin.li <xin.li@daocloud.io>
2022-04-29 20:40:59 +08:00
Nate W 712f45dee4 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-04-26 13:11:13 -07:00
Qiming Teng a3ea9f4caf Update references to the kubelet security files
This commit updates all the existing references to the files move in the previous commit.
2022-04-23 14:32:19 +08:00
Qiming Teng 89b0b1bf8f Move kubelet authentication/authorization out of CLI reference dir
The `kubelet-authentication-authorization` and the `kubelet-tls-bootstrapping`
pages do not belong to `reference/command-line-tools-reference` topic.
This PR moves them into `reference/access-authn-authz` subdirectory
which is a better fit.
The `static/_redirects` file is updated to point to the new location.
2022-04-23 14:30:14 +08:00
CJ Cullen a3638c4fde
Update rbac.md
Fix description of magic service account group.
2022-04-21 14:07:32 -07:00
Kubernetes Prow Robot c62c9e9c61
Merge pull request #32909 from Sea-n/deprecate-ext
Remove deprecated `extensions` API group in document
2022-04-20 08:57:43 -07:00
Nate W 0135d3642b Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-04-19 15:45:28 -07:00
Sean Wei 613bb080ff Remove deprecated `extensions` API group in document 2022-04-16 21:56:25 +08:00
Sean Wei 01c3c53b7d [en] Fix Markdown format 2022-04-14 01:33:53 +08:00
Qiming Teng 0bc8468bfa The PodOverhead feature is GA 2022-04-13 11:49:50 +08:00
Nate W e65201a5b3 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-04-11 09:31:28 -07:00
Mads Jensen eefc776e29
Fix typos in Markdown links. (#32802)
* Fix typos in Markdown links.

* Test

Co-authored-by: Mads Jensen <atombrella@users.noreply.github.com>
2022-04-08 00:16:41 -07:00
Nate W f85be125b9 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-03-31 15:18:13 -07:00
Tim Bannister 672813f3e7
Move PSP into Security concepts section
The logical navigation definitely works better if Pod Security admission
and PodSecurityPolicy are pages in the same section. Make It So.

Co-authored-by: Rey Lejano <rlejano@gmail.com>
2022-03-30 17:30:35 +01:00
Cezary Czekalski 5650e76c45 Fix typo 2022-03-29 19:27:32 +02:00
Qiming Teng 93bdfe8142 Move all volume expansion feature gates to GA 2022-03-29 10:38:58 +08:00
Margo Crawford a364ecae1f Remove references to client.authentication.k8s.io/v1alpha1 exec credential API
Signed-off-by: Margo Crawford <margaretc@vmware.com>
2022-03-21 09:27:55 -07:00
Kubernetes Prow Robot 991f671a02
Merge pull request #30721 from mlbiam/master
making wording clearer on extra in impersonation
2022-03-13 21:02:19 -07:00
Tim Allclair b8264dcfc7 Link to PSP migration guide from PSP to PSS reference 2022-02-25 10:27:52 -08:00
Tim Allclair 198ae37902
Rewrite PodSecurityPolicy migration guide (#31782) 2022-02-24 18:07:56 -08:00
Jay Beale c910edd70e
Correct the name: CertificateSigningRequests
- This page referenced the "CertificationSigningRequests API," but this should be "CertificateSigningRequests API" or "Certificates API." 
- Added a link to the documentation for CertificateSigningRequests.
2022-02-23 17:27:32 -08:00
Shubham a45bf8459d
Added Hyperlink to RFC3339. (#31836)
* Added Hyperlink to RFC3339.

* Wrapping a line!
2022-02-22 22:54:18 -08:00
Qiming Teng bce7fb57e2 Improve configuration API for 1.23
The previous commit for configuration APIs has some nits to fix:

- The client-authentication API has both v1beta1 and v1 supported.
  We need to include both.
- The kube-scheduler v1alpha1 is superceded by v1alpha3 which is new.
- The links to some external type definitions should point to the 1.23
  API rather than old versions.
2021-12-20 09:45:38 +08:00
Marc Boorshtein d4388492c5
Merge branch 'kubernetes:main' into master 2021-12-09 15:12:00 -05:00
Jesse Butler 584421fe11 Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-12-06 08:55:54 -05:00
Kubernetes Prow Robot a3c6627798
Merge pull request #30125 from chirangaalwis/patch-4
Combine Service Account to Map with Resource Type
2021-12-05 20:08:32 -08:00
Kubernetes Prow Robot c9fb665413
Merge pull request #30741 from ptux/patch-10
[en] Update admission-controllers.md
2021-12-05 20:04:32 -08:00
Kubernetes Prow Robot 63db6dbf66
Merge pull request #29717 from jonassteinberg1/patch-1
add 'the' to 'without restarting [the] API server' from Static Token …
2021-12-05 17:56:32 -08:00
Wang 8a8f9c40f9 Update admission-controllers.md 2021-12-06 09:16:27 +09:00
Marc Boorshtein 8dfd425486
making working clearer
*should* implies that an `extra` can be mixed case.  but really it can't because a mixed case `extra` will mismatch on an RBAC `ClusterRole` once the header is canonicalized.
2021-12-02 22:01:07 -05:00
Hemant Kumar 37532e231a Add docs for RecoverVolumeExpansionFailure feature 2021-11-29 16:37:57 -05:00
Jesse Butler d330226a95 Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-11-17 12:55:09 -05:00
Kubernetes Prow Robot 36be0ebac9
Merge pull request #30288 from drigz/patch-2
Remove "basic" from supported API auth methods
2021-11-16 18:51:53 -08:00
Kubernetes Prow Robot d2f227d73e
Merge pull request #29727 from jonassteinberg1/patch-2
"First this user must have [a] certificate issued..."
2021-11-12 21:06:46 -08:00
Jordan Liggitt 4b7784728a PodSecurity beta updates 2021-11-10 10:30:51 -05:00
Rodrigo Queiro f3921c9028
Remove "basic" from supported API auth methods
This was removed in v1.19.
2021-10-28 11:57:07 +02:00
Kubernetes Prow Robot 850e16fe38
Merge pull request #30193 from PranshuSrivastava/broken_link
fixed the broken link
2021-10-27 16:21:02 -07:00
Jonas Steinberg 094d9c034b
remove period and change script to command
Incorrect punctuative period and change the word script to command for uniformity.
2021-10-27 08:41:51 -05:00
Marc Boorshtein e779d2d3fc
Update link to new project documentation site 2021-10-26 15:35:17 -04:00
Shubham Kuchhal 8fbccfcd8f Improvement: Correct the "empty" link in Dynamic Admission Control. 2021-10-26 13:51:38 +05:30