Commit Graph

336 Commits

Author SHA1 Message Date
Kubernetes Prow Robot 8b9ed000f2
Merge pull request #28218 from kelvinn/patch-2
Fix incorrect command
2021-11-22 17:48:16 -08:00
Kubernetes Prow Robot 2b062f57e5
Merge pull request #29753 from verult/fsgroup-to-csi-beta
Updating DelegateFSGroupToCSIDriver feature to beta
2021-11-20 10:30:59 -08:00
Jesse Butler d330226a95 Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-11-17 12:55:09 -05:00
Kubernetes Prow Robot 9028af1ae3
Merge pull request #28226 from saschagrunert/image-config-json
Add docs about auth differences between Docker and Kubernetes
2021-11-17 03:49:54 -08:00
Kubernetes Prow Robot d9a041eb7d
Merge pull request #30067 from sftim/20211013_tidy_pull_image_private_registry_task
Tidy task “Pull an Image from a Private Registry”
2021-11-12 19:46:46 -08:00
Cheng Xing 1e0796c4e4 Delegate FSGroup to CSI beta 2021-11-10 17:02:51 -08:00
Jordan Liggitt 4b7784728a PodSecurity beta updates 2021-11-10 10:30:51 -05:00
Andrei Kvapil 02d9cec45e
api-audiences flag can be omitted 2021-11-08 11:52:11 +01:00
Jordan Liggitt 0dfdffe95f Fix typo in podsecurity config example 2021-10-27 13:58:12 -04:00
slayer321 d283c1f545 docs: add PV duplicate example 2021-10-25 09:52:46 -04:00
Tim Bannister 8230d25180 Mark Docker as third-party software
As per the content guide, Docker is (essential) third party software.
Alternatives exist but Docker is certainly the most common tool used for
this kind of task.

Anyway, mark that it's third party.
2021-10-13 00:10:56 +01:00
Tim Bannister 0ce669e40d Revise “Pull an Image from a Private Registry”
- link to new-style API reference
- call a manifest a manifest
- use tooltips where appropriate
- other general tidying
2021-10-13 00:10:06 +01:00
Jesang Myung 56506ce8db
Update configure-gmsa.md
add start backquote in line 261. It was missing.
2021-10-11 03:05:25 +09:00
radva 5d0c9eae0e
Update translate-compose-kubernetes.md
update to latest release version since version 1.22 doesn't support 3.8
2021-09-21 17:53:57 +02:00
Shubham Kuchhal 2a6272ddf8 Fixed the link for Exemptions. 2021-09-14 18:18:31 +05:30
Sascha Grunert c86b8a3e43
Add docs about auth differences between Docker and Kubernetes
The interpretation between Docker and Kubernetes varies when comparing
its implementations. This allows different use cases and should be
documented accordingly.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
Co-authored-by: Geoffrey Cline <gcline@amazon.com>
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-09-09 09:20:38 +02:00
Maria Camacho f1b99bb92d
Update static-pod.md
Added a missing verb and full stop.
2021-08-26 19:30:42 +03:00
Kubernetes Prow Robot 87235b508d
Merge pull request #29311 from mengjiao-liu/update-githubbranch-param
Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value
2021-08-16 06:03:18 -07:00
Kubernetes Prow Robot 7331e54c09
Merge pull request #28623 from chenxuc/staticPod
static pod not support configmap or secret
2021-08-10 03:23:17 -07:00
Mengjiao Liu f945335af6 Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value 2021-08-10 18:03:21 +08:00
Kubernetes Prow Robot 2fbd6ceded
Merge pull request #28879 from Shubham82/correct-FQDN_for_dockerhub
Correct FQDN for DockerHub.
2021-08-10 00:35:20 -07:00
Yuiko Mouri 8f301ea379 Replace with relative path 2021-08-05 11:54:46 +09:00
Kubernetes Prow Robot ddf46cfd6b
Merge pull request #29124 from tallclair/podsecurity
[PodSecurity] Correct and clarify a few things
2021-07-28 11:26:47 -07:00
Tim Allclair 6ac692be8e [PodSecurity] Correct and clarify a few things 2021-07-28 10:41:59 -07:00
Victor Palade 3c95e6a96b Merge master into dev-1.22 to keep in sync 2021-07-27 18:47:27 +03:00
Brandon Smith af2f72ad59
Windows HostProcess Container Documentation (#28413)
* Rebasing HostProcess security changes.

* Incorporated initial round of feedback

* Minor wording updates

* Finished up remaining todo items

* Apply suggestions from code review

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Mark Rossetti <marosset@microsoft.com>

* Moved HostProcess security documentation into PSS and create-host-process-pod docs

* Updated with for James' review

* Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>

* Minor edits

* Modifications for additional feedback

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Mark Rossetti <marosset@microsoft.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>
2021-07-27 00:50:45 -07:00
chenxuc 8c9c9c543c static pod not support configmap or secret 2021-07-27 14:51:45 +08:00
Kubernetes Prow Robot 0650476fb5
Merge pull request #28930 from ehashman/kep-2238-beta
KEP-2238 probe-level grace period changes for beta/1.22
2021-07-22 17:11:16 -07:00
Kubernetes Prow Robot f92e3ec2ba
Merge pull request #28903 from sejr/feat/podsecurity
Add Pod Security Standards documentation
2021-07-22 01:57:52 -07:00
Samuel Roth e0d4b53b1c incorporating initial round of feedback 2021-07-21 15:33:46 +00:00
Kubernetes Prow Robot 2007c90673
Merge pull request #28869 from verult/fsgroup-to-csi
Documentation for delegating FSGroup change to CSI driver
2021-07-21 07:04:08 -07:00
Monis Khan 0d57c5dffa
Fix note about SA OIDC discovery doc default binding
Added in v1.19: https://pr.k8s.io/88344

Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-20 17:19:54 -04:00
Elana Hashman 3f0103cd26
Update beta status for 1.22 probe-level grace periods 2021-07-20 11:09:36 -07:00
Cheng Xing ac68a21c9a Documentation for delegating FSGroup change to CSI driver 2021-07-19 14:28:07 -07:00
Shubham Kuchhal a3b120928d Correct FQDN for DockerHub. 2021-07-09 17:02:58 +05:30
Shubham Kuchhal 752122089d Update link for "Service Account Signing Key Retrieval KEP" 2021-07-06 15:06:14 +05:30
Shubham Kuchhal 21f7528b75 Update the Seccomp link. 2021-06-29 12:24:04 +05:30
Kubernetes Prow Robot 5dfcf92490
Merge pull request #28447 from tengqm/fix-file-modes
Remove exec permission on markdown files
2021-06-17 19:04:04 -07:00
Qiming Teng e9703497a1 Remove exec permission on markdown files
For some unknown reasons, we have got many markdown files with exec
permission. That is weird and risky.
2021-06-16 17:57:00 +08:00
Kubernetes Prow Robot 94b2004b82
Merge pull request #28097 from jmyung/patch-1
fix minor typo in configure-runasusername.md
2021-06-09 17:17:27 -07:00
Kubernetes Prow Robot 0bf3cb6b6c
Merge pull request #27989 from makusu2/patch-1
Clarify what must be the same
2021-06-08 18:17:47 -07:00
Kubernetes Prow Robot fbab5a864d
Merge pull request #28073 from vitaliyf/patch-1
Clarify that Docker registry secrets are using type kubernetes.io/dockerconfigjson
2021-06-08 14:24:08 -07:00
Shubham Kuchhal 8d50647fdb Improve Configure Service Accounts
Improvement in Configure Service Accounts for Pods Task

Signed-off-by: Shubham Kuchhal <shubham.kuchhal@india.nec.com>

Remove annotations field from metadata.
2021-06-03 20:57:10 +05:30
Kelvin Nicholson 04b5916f26
Fix incorrect command 2021-06-01 22:15:18 +10:00
Kiran Mova 333b04b12f
remove alpha feature note from fsGroupChangePolicy 2021-05-26 17:45:20 +05:30
Jesang Myung dd05e6211d no right parenthesis in three parts. 2021-05-24 22:36:12 +09:00
Vitaliy ccc61c87fc
Clarify that Docker registry secrets are using type kubernetes.io/dockerconfigjson 2021-05-20 18:49:59 -04:00
Steven Pitts e72b6ace24
Update content/en/docs/tasks/configure-pod-container/quality-service-pod.md 2021-05-20 09:03:46 -04:00
Steven Pitts 0103741138
Update content/en/docs/tasks/configure-pod-container/quality-service-pod.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2021-05-19 17:23:05 -04:00
Kubernetes Prow Robot b80558fe4a
Merge pull request #26957 from k-wall/patch-1
Behaviour when optional configmap appears after the pod starts
2021-05-19 02:38:51 -07:00
Peri Thompson 39e22bec23 Added Windows Containerd GMSA Updates 2021-05-17 16:31:22 +00:00
Steven Pitts c315df3c0f
Clarify what must be the same
When reading these sentences, I thought that each pod must have the same values as each other pod. In other words, pod1's memory limit must equal pod2's memory limit.

It looks like I misunderstood; "must be the same" means that the limit and request values on each individual pod must match.

Clarify what "must be the same".
2021-05-14 12:12:48 -04:00
Jai Govindani 37ea6e0bf5
docs(probes): add version req info
Signed-off-by: Jai Govindani <jai@honestbank.com>
2021-04-27 21:07:31 +07:00
Tim Bannister 965aa51daf Merge master into dev-1.21 to keep in sync, plus latest API reference
This sync merge includes API reference updates.
2021-04-06 21:38:24 +01:00
Keith Wall a5f6961507
Address review comments. 2021-04-05 12:50:52 +01:00
Qiming Teng 79845b0c4a Add kubelet config reference
This is a reference for kubelet config generated from
github.com/tengqm/genref tool using the following command:

./genref -include kubelet-config
2021-04-01 21:53:14 +08:00
Kubernetes Prow Robot 4c9d2d7841
Merge pull request #27084 from ehashman/kep-2238-alpha
Add documentation for Liveness Probe Grace Periods
2021-03-26 21:18:43 -07:00
Elana Hashman 3105d524e3
Add documentation for probe-level grace period overrides 2021-03-26 13:37:37 -07:00
Victor Palade ca046d9b1f Merge master into dev-1.21 to keep in sync 2021-03-26 21:29:52 +01:00
Karen Bradshaw 3ff5ec1eff clean up use of word: just 2021-03-17 19:57:40 -04:00
k-wall 2edc0b8e59 Document behaviour when optionally referenced configmap appears after the pod starts 2021-03-08 21:13:16 +00:00
Victor Palade 70096affc5 Merge remote-tracking branch 'upstream/master' into dev-1.21 2021-03-05 17:05:24 +01:00
Henry Liu 77ecc224b8 change callout from warning to caution 2021-03-02 15:11:18 +08:00
Kubernetes Prow Robot 88588e708a
Merge pull request #26387 from caleb15/patch-1
add warning about counterintuitive readiness probe
2021-03-01 13:10:16 -08:00
Michael Taufen a0d509156d Update ServiceAccountIssuerDiscovery docs for GA 2021-02-22 12:51:00 -08:00
Qiming Teng 18c22d133e Fix dockerhub URL 2021-02-16 12:17:57 +08:00
Kubernetes Prow Robot 8377d08841
Merge pull request #25986 from schollii/master
Clarify binaryData handling by kubectl create and describe
2021-02-10 02:16:59 -08:00
Kubernetes Prow Robot c24f62c16a
Merge pull request #26389 from kbhawkey/fixup-simply-usage
clean up use of word: simply
2021-02-09 02:02:40 -08:00
Paran Lee af40c89b7b
Update Kompose version from 1.21.0 to 1.22.0 2021-02-07 22:46:46 -09:00
Karen Bradshaw 3fd65482e8 clean up use of word: simply 2021-02-07 12:15:29 -05:00
Kubernetes Prow Robot 947281bcd2
Merge pull request #26323 from nasirhm/kompose_up_removal_line
Modify Kompose Page: remove the up command
2021-02-06 06:23:11 -08:00
Caleb Collins-Parks bee671b579
add warning about counterintuitive readiness probe
As evidenced by https://github.com/kubernetes/kubernetes/issues/27114 the naming leads one to think that a liveness probe executes after a readiness probe. This is not the case.
2021-02-04 10:37:31 -08:00
Kubernetes Prow Robot 6966decdfe
Merge pull request #26196 from Xorima/patch-1
documentation to static-pods for naming of pods
2021-02-03 14:28:28 -08:00
Jason Field 618dcb3cfa
Update content/en/docs/tasks/configure-pod-container/static-pod.md
Co-authored-by: Taylor Dolezal <onlydole@users.noreply.github.com>
2021-02-03 22:23:13 +00:00
nasirhm 72f4f64d04
🔧 Modify Kompose page, to remove up
Signed-off-by: nasirhm <nasirhussainm14@gmail.com>
2021-01-31 18:50:40 +05:00
Jason Field 4d337aea9e documentation to static-pods for naming of pods
This will add documentation around how a static pod will be named
2021-01-27 20:43:52 +00:00
Ricardo Pchevuzinske Katz 2346581566
Fix some spell checking
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2021-01-24 16:27:42 -03:00
Oliver L Schoenborn c398ae4821
Update content/en/docs/tasks/configure-pod-container/configure-pod-configmap.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2021-01-12 19:57:21 -05:00
Oliver L Schoenborn 26300785f5
Clarify binaryData handling by kubectl create and describe 2021-01-06 21:33:07 -05:00
ydFu 8a479c01e8 Add Code blocks in configure-service-account.md
* Add Code blocks in the Markdown spec to make it easy to read.

* Uniform case and adjustment description for smoother writing.

Signed-off-by: ydFu <ader.ydfu@gmail.com>
2021-01-06 11:06:12 +08:00
morihaya e57ff3eb52
Add a default description to path of HTTP probes 2020-12-30 21:36:08 +09:00
Sergey Shevelev 7e4e475611
Fix examples for http probe headers 2020-12-22 13:58:55 -05:00
Evgeny Shmarnev e436cf704f State that no more than one handler is allowed per lifecycle event 2020-12-10 17:14:45 +01:00
Kristin Martin 86d9492ccb Merge remote-tracking branch 'upstream/master' into merged-master-dev-1.20 2020-12-03 11:58:44 -08:00
Nate W f205837b9a Updating docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes
Adding the successThreshold default value of startupProbe in the Configure Probes section.

fixes: https://github.com/kubernetes/website/issues/24049
Signed-off-by: Nate W <4453979+nate-double-u@users.noreply.github.com>
2020-11-25 17:29:21 -08:00
Somtochi Onyekwere ba77c903ed Merge remote-tracking branch 'upstream/master' into dev-1.20 2020-11-19 17:09:49 +01:00
Sylvain COULOMBEL 1ec78b1f28 Improve configmap usage as pod command and args 2020-11-17 21:54:25 +01:00
Hugo Fonseca 2300a3e0fe HTTP Probe - Update documentation about default headers 2020-11-12 15:47:40 +00:00
Kubernetes Prow Robot 3450e8be44
Merge pull request #24913 from mattcary/placerholder-fsgroup
Promote ConfigurableFSGroupPolicy feature to beta
2020-11-11 16:24:50 -08:00
Irvi Aini bb33373bb3
Merge branch 'master' into dev-1.20 2020-11-11 14:55:30 +01:00
Sergey Kanzhelev 1f306541c7
Update content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2020-11-11 01:39:07 -08:00
Sergey Kanzhelev 1a13c6ba45
Update content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2020-11-11 01:38:45 -08:00
Sergey Kanzhelev d81ee2342a
Update content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2020-11-11 01:38:09 -08:00
Sergey Kanzhelev 220a7b201b ExecProbeTimeout feature gate introduction 2020-11-10 00:10:11 +00:00
Matthew Cary c5ffbec1ea placeholder CL for fsgroup policy beta 2020-11-09 21:14:47 +00:00
ruiwen-zhao 75456274f9 Explicitly mention init containers in the QoS doc 2020-11-06 19:19:38 +00:00
Shihang Zhang 3590d73008
TokenRequest and TokenRequestProjection are GA now (#24823) 2020-11-04 11:24:53 -08:00
Hugo Fonseca f5a8dbe61e HTTP Probe - Documenting about default headers 2020-10-31 17:12:42 +00:00
eagleusb 45ec60bed5
Merge master into dev-1.20 to keep in sync 2020-10-22 17:44:02 +02:00
Kubernetes Prow Robot b2c714b279
Merge pull request #24678 from tengqm/links-tasks
Fix links in the tasks section
2020-10-22 02:09:35 -07:00