1c250e49bf
Add diagram for admission control phases which shows the new validatingadmissionpolicies ( #43836 )
...
* Add diagram for admission control phases which shows the new validatingadmissionpolicies
* Change to a mermaid diagram
* Add accessibility description
* Fix font size issue
* Correct blue colour
* Move diagram type to top to see if it builds correctly
* Convert to exported svg and mermaid-live link
* correct image path
* Update filepath
* Update link to mermaid doc
With the annotation changes
* Delete content/en/docs/images/admission-control-phases.svg
* correct image path
* Correct parallelism of stages and state parallel stage explicitly
* Undo autolint
* Undo further autolint
* Remove bad merge
* Revert yet more IDE autoformatting
* Revert more IDE nonsense
* Remove yet more ide nonsense
* Remove the last of the IDE autoformatting
* Fix last piece of the bad merge
2025-02-23 13:26:27 -08:00
91919bdba5
Merge pull request #46798 from fasaxc/patch-1
...
Add more suggestions for avoiding deadlocks to webhook docs
2025-02-20 14:08:27 -08:00
0c40eced7e
Add more suggestions for avoiding deadlocks
...
Webhooks can cause deadlocks in several ways, expand the list to cover more subtle cases.
Co-authored-by: Kat Cosgrove <kat.cosgrove@gmail.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2025-02-17 13:21:59 +00:00
97cbae19d2
Merge pull request #48920 from AmarNathChary/updated_yaml_to_json
...
Switch extensible admission payload example from YAML to JSON
2025-02-12 23:56:23 -08:00
8b78fb8239
enable copying rolebinding examples directly
2025-02-12 13:36:26 +05:30
74ffdcecda
Merge pull request #48200 from iheartNathan/42288-Inconsistent-documentation-of-default-StorageClass
...
fix inconsistency in documentation of default storageclass
2025-02-11 05:37:58 -08:00
2e15797126
Merge pull request #49589 from NareshKoduru/role_copy
...
Enable copying role and clusterRole snippets
2025-01-29 16:19:22 -08:00
6c6165d5e2
Enable copying role and clusterRole snippets
2025-01-29 10:15:16 +05:30
0338db1b94
add exempt api kinds in mutating admission policies doc
2025-01-22 18:31:51 +01:00
37017f4c04
fix: api kinds in upper camel case
2025-01-22 18:19:26 +01:00
4e3523c0a0
fix inconsistency in documentation of default storageclass
2025-01-22 15:22:35 +00:00
a1688890f0
Update content/en/docs/reference/access-authn-authz/validating-admission-policy.md
...
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2025-01-22 08:11:00 +01:00
ede1a137fc
Update content/en/docs/reference/access-authn-authz/validating-admission-policy.md
...
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2025-01-22 08:10:46 +01:00
baaf68c601
Update content/en/docs/reference/access-authn-authz/validating-admission-policy.md
...
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2025-01-22 08:10:27 +01:00
eb357e28f7
docs: extend VAP docs with exempt resources
...
Signed-off-by: Thomas Gosteli <thomas.gosteli@protonmail.ch>
2025-01-21 17:04:00 +01:00
a214e105a2
Clean up service-accounts-admin.md
2025-01-21 09:08:14 +08:00
45182c8c24
change ValidatingAdmissionWebhook to ValidatingAdmissionPolicy
2025-01-14 21:22:05 +07:00
212637cfb7
Reorder ValidatingAdmissionPolicy components for logical flow
2024-12-20 09:34:38 +08:00
baba5e4c35
Merge main into dev-1.32 to keep in sync
2024-12-09 23:11:06 -05:00
370c47dacc
changed comments
2024-12-05 12:03:27 +05:30
8104af95c1
changed back to yaml
2024-12-03 14:55:12 +05:30
1e5175b94d
Updated extensible admission controller yaml file to json
2024-12-02 14:20:12 +05:30
ee231f71d7
Merge pull request #48495 from munnerz/kep-4193-132-ga
...
KEP-4193: Update ServiceAccount admin docs with additional info on bound tokens
2024-11-26 19:22:56 +00:00
cb8e5a7ce5
KEP-3962: Mutating admission policy documentation ( #48646 )
...
* Introduce concept page for mutating admission policy
* add example and documentation for MAP
* fix MAP feature gate documentation
* address comments
* Apply suggestions from code review
Co-authored-by: Tim Bannister <tim@scalefactory.com>
---------
Co-authored-by: Joe Betz <jpbetz@google.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2024-11-26 18:20:56 +00:00
4ef866967e
Apply suggestions from code review
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2024-11-26 18:09:26 +00:00
a3c89ce64a
Update content/en/docs/reference/access-authn-authz/service-accounts-admin.md
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2024-11-26 18:08:56 +00:00
01eccc6441
Merge pull request #48771 from ritazh/deprecate-EnforceMountableSecretsAnnotation
...
Add deprecation warnings for enforce-mountable-secrets annotation
2024-11-26 17:12:56 +00:00
0c28e697d4
address review comments
2024-11-26 11:25:39 +00:00
3b8c927a3b
Address comments
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2024-11-20 19:00:50 -08:00
926db124d0
Add deprecation warnings for enforce-mountable-secrets annotation
2024-11-19 07:59:43 -08:00
d8dbc916c4
Merge pull request #48487 from ritazh/kep_3221_ga
...
KEP-3221: remove mentions of beta and featuregate, and change order of cmd line
2024-11-19 13:30:53 +00:00
7e26a80e3d
Merge pull request #48518 from HarshalNeelkamal/external-jwt-doc
...
Docs for ExternalJWTSigner
2024-11-19 00:32:53 +00:00
9690d1f99e
add doc for external JWT signer
2024-11-18 07:49:03 +00:00
d021207741
Merge main into dev-1.32 to keep in sync
2024-11-11 17:40:26 -05:00
950a9dfdb6
Improve admission control reference
...
- Change page title. The reference is about admission control (as a
concept) as well as providing a list of all admission controllers.
- Expand the intro section to provide more of an explanation of
admission control.
- Emphasize that ValidatingAdmissionPolicy, along with mutating and
validating webhooks, are extension points.
2024-11-11 22:07:22 +00:00
cdff2b4b6b
Add systems:master paragraph
2024-10-30 18:09:24 -07:00
7a1cdab150
KEP-4633: Graduate to BETA.
...
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
2024-10-25 15:42:32 +00:00
1de1753475
Merge main into dev-1.32 to keep in sync
2024-10-23 23:46:20 -03:00
7d8b07ef63
KEP-3221: remove mentions of beta and change order of cmd line
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2024-10-22 21:30:28 -07:00
b92deb464a
Merge pull request #48412 from vinayakankugoyal/kep2862impl
...
KEP-2862: Fine-grained Authz for Kubelet API.
2024-10-23 00:22:52 +01:00
152e83d1a1
Update ServiceAccount admin docs with additional info on bound tokens
2024-10-22 15:06:22 +01:00
b6086ca952
KEP-2862: Fine-grained Authz for Kubelet API.
...
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
2024-10-21 22:14:37 +00:00
32aad9dd3f
KEP-3221: Promote StructuredAuthorizationConfiguration to GA
2024-10-21 11:46:18 -04:00
1f1779e777
Update structured authz examples
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2024-10-16 13:30:08 -07:00
ae1af38c53
Merge main into dev-1.32 to keep in sync
2024-10-08 09:34:16 -03:00
3b267126e9
Add checkpoint subresource to Kublet authorization doc ( #48012 )
...
* Add checkpoint subresource to Kublet authorization doc
* Update kubelet-authn-authz.md
* Replace `spec` with `checkpoint` in subresource
2024-10-03 05:38:26 +01:00
f005d8cd8b
Merge main into dev-1.32 to keep in sync
2024-09-18 10:44:33 -04:00
2e7c1d4935
add hyperlink for RFC3339 in bootstrap-tokens.md
2024-09-11 11:29:12 +04:00
3ff8a9c65a
Add note about k8s.io, kubernetes disallowed prefix for structured authn
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-09-06 09:46:43 -07:00
5bc26c7ff3
Merge pull request #47404 from aleskandro/patch-1
...
Clarify expiration time for service accounts and tokens of pods pending deletion despite finalizers
2024-08-14 01:15:56 -07:00
Richard Tweed
Kubernetes Prow Robot
Shaun Crampton
Naresh Koduru
Thomas Gosteli
iheartNathan
Thomas Gosteli
windsonsea
Mohammad Alavi
谭成
michellengnx
AmarNathChary
Jeffrey Ying
James Munnelly
James Munnelly
Rita Zhang
Harshal Neelkamal
Tim Bannister
Marcelo Giles
Vinayak Goyal
Rodolfo Albuquerque
Jordan Liggitt
Simon Bäumer
Daniel Chan
ChinoUkaegbu
Anish Ramasekar