Commit Graph

293 Commits

Author SHA1 Message Date
Kubernetes Prow Robot 3baac6dde3
Merge pull request #30705 from jlbutler/merged-main-dev-1.23
Periodic integration branch sync for 1.23
2021-12-02 18:02:26 -08:00
Brandon Smith b90d125e1c
kublet -> kubelet (#30700) 2021-12-02 09:45:34 -08:00
Jesse Butler 018f9d05a2 Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-12-01 12:23:10 -05:00
Kubernetes Prow Robot f17f3884a2
Merge pull request #29740 from SergeyKanzhelev/grpcProbeDocsPlaceholder
gRPC probes support (KEP 2727)
2021-11-30 16:09:18 -08:00
Brandon Smith 6a684469cb
Windows HostProcess Beta 1.23 Documentation (#30391)
* Added initial version change

* Added more information for HostProcess in 1.23, removed content relating to 1.22 specifically.

* Made containerd mention specific to 1.6

* Added note about base images and removed annotation mentions

* Reworded prerequisites section.
2021-11-30 15:49:17 -08:00
Sergey Kanzhelev ef6668539c gRPC probes 2021-11-30 23:35:27 +00:00
Kubernetes Prow Robot 48612bee86
Merge pull request #30553 from gnufied/kep-695-doc
Move ConfigurableFSGroupPolicy to GA
2021-11-29 13:51:21 -08:00
Hemant Kumar 2ebfcfea1a Update docs for ConfigurableFSGroupPolicy 2021-11-29 14:03:26 -05:00
Kubernetes Prow Robot 8b9ed000f2
Merge pull request #28218 from kelvinn/patch-2
Fix incorrect command
2021-11-22 17:48:16 -08:00
Kubernetes Prow Robot 2b062f57e5
Merge pull request #29753 from verult/fsgroup-to-csi-beta
Updating DelegateFSGroupToCSIDriver feature to beta
2021-11-20 10:30:59 -08:00
Jesse Butler d330226a95 Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-11-17 12:55:09 -05:00
Kubernetes Prow Robot 9028af1ae3
Merge pull request #28226 from saschagrunert/image-config-json
Add docs about auth differences between Docker and Kubernetes
2021-11-17 03:49:54 -08:00
Kubernetes Prow Robot d9a041eb7d
Merge pull request #30067 from sftim/20211013_tidy_pull_image_private_registry_task
Tidy task “Pull an Image from a Private Registry”
2021-11-12 19:46:46 -08:00
Cheng Xing 1e0796c4e4 Delegate FSGroup to CSI beta 2021-11-10 17:02:51 -08:00
Jordan Liggitt 4b7784728a PodSecurity beta updates 2021-11-10 10:30:51 -05:00
Andrei Kvapil 02d9cec45e
api-audiences flag can be omitted 2021-11-08 11:52:11 +01:00
Jordan Liggitt 0dfdffe95f Fix typo in podsecurity config example 2021-10-27 13:58:12 -04:00
Tim Bannister 8230d25180 Mark Docker as third-party software
As per the content guide, Docker is (essential) third party software.
Alternatives exist but Docker is certainly the most common tool used for
this kind of task.

Anyway, mark that it's third party.
2021-10-13 00:10:56 +01:00
Tim Bannister 0ce669e40d Revise “Pull an Image from a Private Registry”
- link to new-style API reference
- call a manifest a manifest
- use tooltips where appropriate
- other general tidying
2021-10-13 00:10:06 +01:00
Jesang Myung 56506ce8db
Update configure-gmsa.md
add start backquote in line 261. It was missing.
2021-10-11 03:05:25 +09:00
radva 5d0c9eae0e
Update translate-compose-kubernetes.md
update to latest release version since version 1.22 doesn't support 3.8
2021-09-21 17:53:57 +02:00
Shubham Kuchhal 2a6272ddf8 Fixed the link for Exemptions. 2021-09-14 18:18:31 +05:30
Sascha Grunert c86b8a3e43
Add docs about auth differences between Docker and Kubernetes
The interpretation between Docker and Kubernetes varies when comparing
its implementations. This allows different use cases and should be
documented accordingly.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
Co-authored-by: Geoffrey Cline <gcline@amazon.com>
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-09-09 09:20:38 +02:00
Maria Camacho f1b99bb92d
Update static-pod.md
Added a missing verb and full stop.
2021-08-26 19:30:42 +03:00
Kubernetes Prow Robot 87235b508d
Merge pull request #29311 from mengjiao-liu/update-githubbranch-param
Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value
2021-08-16 06:03:18 -07:00
Kubernetes Prow Robot 7331e54c09
Merge pull request #28623 from chenxuc/staticPod
static pod not support configmap or secret
2021-08-10 03:23:17 -07:00
Mengjiao Liu f945335af6 Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value 2021-08-10 18:03:21 +08:00
Kubernetes Prow Robot 2fbd6ceded
Merge pull request #28879 from Shubham82/correct-FQDN_for_dockerhub
Correct FQDN for DockerHub.
2021-08-10 00:35:20 -07:00
Yuiko Mouri 8f301ea379 Replace with relative path 2021-08-05 11:54:46 +09:00
Kubernetes Prow Robot ddf46cfd6b
Merge pull request #29124 from tallclair/podsecurity
[PodSecurity] Correct and clarify a few things
2021-07-28 11:26:47 -07:00
Tim Allclair 6ac692be8e [PodSecurity] Correct and clarify a few things 2021-07-28 10:41:59 -07:00
Victor Palade 3c95e6a96b Merge master into dev-1.22 to keep in sync 2021-07-27 18:47:27 +03:00
Brandon Smith af2f72ad59
Windows HostProcess Container Documentation (#28413)
* Rebasing HostProcess security changes.

* Incorporated initial round of feedback

* Minor wording updates

* Finished up remaining todo items

* Apply suggestions from code review

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Mark Rossetti <marosset@microsoft.com>

* Moved HostProcess security documentation into PSS and create-host-process-pod docs

* Updated with for James' review

* Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>

* Minor edits

* Modifications for additional feedback

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Mark Rossetti <marosset@microsoft.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>
2021-07-27 00:50:45 -07:00
chenxuc 8c9c9c543c static pod not support configmap or secret 2021-07-27 14:51:45 +08:00
Kubernetes Prow Robot 0650476fb5
Merge pull request #28930 from ehashman/kep-2238-beta
KEP-2238 probe-level grace period changes for beta/1.22
2021-07-22 17:11:16 -07:00
Kubernetes Prow Robot f92e3ec2ba
Merge pull request #28903 from sejr/feat/podsecurity
Add Pod Security Standards documentation
2021-07-22 01:57:52 -07:00
Samuel Roth e0d4b53b1c incorporating initial round of feedback 2021-07-21 15:33:46 +00:00
Kubernetes Prow Robot 2007c90673
Merge pull request #28869 from verult/fsgroup-to-csi
Documentation for delegating FSGroup change to CSI driver
2021-07-21 07:04:08 -07:00
Monis Khan 0d57c5dffa
Fix note about SA OIDC discovery doc default binding
Added in v1.19: https://pr.k8s.io/88344

Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-20 17:19:54 -04:00
Elana Hashman 3f0103cd26
Update beta status for 1.22 probe-level grace periods 2021-07-20 11:09:36 -07:00
Cheng Xing ac68a21c9a Documentation for delegating FSGroup change to CSI driver 2021-07-19 14:28:07 -07:00
Shubham Kuchhal a3b120928d Correct FQDN for DockerHub. 2021-07-09 17:02:58 +05:30
Shubham Kuchhal 752122089d Update link for "Service Account Signing Key Retrieval KEP" 2021-07-06 15:06:14 +05:30
Shubham Kuchhal 21f7528b75 Update the Seccomp link. 2021-06-29 12:24:04 +05:30
Kubernetes Prow Robot 5dfcf92490
Merge pull request #28447 from tengqm/fix-file-modes
Remove exec permission on markdown files
2021-06-17 19:04:04 -07:00
Qiming Teng e9703497a1 Remove exec permission on markdown files
For some unknown reasons, we have got many markdown files with exec
permission. That is weird and risky.
2021-06-16 17:57:00 +08:00
Kubernetes Prow Robot 94b2004b82
Merge pull request #28097 from jmyung/patch-1
fix minor typo in configure-runasusername.md
2021-06-09 17:17:27 -07:00
Kubernetes Prow Robot 0bf3cb6b6c
Merge pull request #27989 from makusu2/patch-1
Clarify what must be the same
2021-06-08 18:17:47 -07:00
Kubernetes Prow Robot fbab5a864d
Merge pull request #28073 from vitaliyf/patch-1
Clarify that Docker registry secrets are using type kubernetes.io/dockerconfigjson
2021-06-08 14:24:08 -07:00
Shubham Kuchhal 8d50647fdb Improve Configure Service Accounts
Improvement in Configure Service Accounts for Pods Task

Signed-off-by: Shubham Kuchhal <shubham.kuchhal@india.nec.com>

Remove annotations field from metadata.
2021-06-03 20:57:10 +05:30