Commit Graph

359 Commits

Author SHA1 Message Date
Bryan Boreham f5ca6fae32 Update documentation about CNI flags and requirements (#1516)
* Update CNI kubelet option names

* Expand the minimum CNI requirements
2016-10-21 19:19:06 -07:00
Chris Marino d8688fa817 Add Romana to docs
ToC, and kubeadm page
2016-10-21 13:32:29 -07:00
Seth Jennings 98a4b521fd AUTOSCALER not AUTOSCALING 2016-10-20 10:46:51 -05:00
Bryan Boreham 4f0d6c1609 Adjust wording per review comments 2016-10-20 09:48:17 +01:00
Feynman Liang 8cab01acfa Merge branch 'master' into patch-1 2016-10-17 20:02:35 -07:00
devin-donnelly 7598df1a94 Merge pull request #1425 from bobbytables/patch-1
Fix code fencing for DNS validation example
2016-10-17 16:37:34 -07:00
Feynman Liang 1480754235 Correct typo in authorization header 2016-10-17 15:58:45 -07:00
devin-donnelly 20028937ab Merge pull request #1454 from pabloguerrero/patch-3
Update index.md
2016-10-17 14:53:13 -07:00
Kami Gerami 3ef9c7e526 34613 404 Not Found on links referring to /docs/user-guide/kubectl/kubectl/
Changed all links referring to kubectl from /docs/user-guide/kubectl/kubectl/ to /docs/user-guide/kubectl/
2016-10-16 13:39:43 +02:00
Pablo Guerrero 8f41a65a40 Update index.md 2016-10-13 14:43:48 +02:00
Lucas Käldström 23d7719663 Move kubeadm reference, add a navigation link to it and assignees 2016-10-11 09:01:12 +03:00
Robert Ross ced57785df Fix code fencing for DNS validation example 2016-10-10 19:39:14 -04:00
devin-donnelly 99e12c694a Merge pull request #1303 from MikeSpreitzer/updoc1
Clarified remark about authorizers determining groups
2016-10-10 15:39:58 -07:00
Mike Spreitzer 12f5e30309 Removed confusing remark about authorizers determining groups
The old text said that the authorizer is expected to determine group
memberships when the authenticator does not.  This not true.  It is
allowed, but not expected --- and none of the standard authorizers do
it.  I tried composing a brief correct statement about this, but the
reviews were mainly aghast that internal details of some non-standard
authorizers were being injected into the discussion of authentictors.
I decided that the better part of valor is simply to delete the whole
topic from here.  Besides, it is a conclusion that any reader would
normally draw --- since there is no statement forbidding it (nor
indeed any indication that there might be a reason to forbid it), any
reader would naturally conclude that an authorizer is free to derive
additional intermediate information of any sort and in any way it
likes.
2016-10-09 15:28:31 -04:00
Mike Spreitzer 30a8b4724f Clarified the apiGroup identified by empty string
Noted this where the relevance of api group is introduced, and
corrected the reference to what the empty string means ("core" api
group, which is the terminology used in the page that introduces api
group, rather than the old text "default").
2016-10-06 21:31:46 -07:00
devin-donnelly 35e25311b5 Merge pull request #1144 from adieu/format
Some small style tweaks to make pandoc working
2016-10-05 15:44:26 -07:00
devin-donnelly 49c83f4d12 Merge pull request #1251 from philips/add-details-from-dns-docs
admin: dns: merge from the build dir
2016-10-05 15:06:29 -07:00
devin-donnelly 6d5580590a Merge pull request #1332 from InQuicker/client-cert-groups
Explain how to define group memberships with client cert authentication.
2016-10-05 14:24:53 -07:00
devin-donnelly 15ada05bb7 Merge pull request #1333 from InQuicker/rbac-subresource
Document subresources in RBAC.
2016-10-05 14:19:58 -07:00
Jordan Liggitt 19e61ec1d6
Describe anonymous access, system:authenticated group 2016-10-05 13:11:37 -04:00
Mike Spreitzer 49c0ed7680 Merge branch 'master' into updoc3 2016-09-30 23:05:47 -04:00
Tim St. Clair 5eff46b035
Fix links to AppArmor policy references 2016-09-30 11:13:07 -07:00
Brandon Philips 8aa10a6fda admin: dns: merge from the build dir
Try and clean this mess up where the build dir has user facing docs and move them here.

Ref: https://github.com/kubernetes/kubernetes/pull/32931
2016-09-28 15:40:53 -07:00
Bryan Boreham c8abb1c5f8 Clarify what kubenet does and does not do 2016-09-28 16:58:31 +01:00
Jimmy Cuadra 19e65e224a Document subresources in RBAC. 2016-09-27 21:30:08 -07:00
Jimmy Cuadra 777e234970 Explain how to define group memberships with client cert authentication. 2016-09-27 17:43:34 -07:00
Mike Spreitzer fa44441f68 Noted HTTP syntax restriction on bearer tokens
Noted that every bearer token, in any of the four authentication
strategies that use bearer tokens, appears in an HTTP header
value without additional quotation/encoding (beyond that supported
by HTTP).  Included a fully concrete example.  Wrote this down once,
where the issue first arises, and referenced it from the other relevant
strategies.

This constraint was elicited in #sig-auth discussion
on Sep 21, and not previously stated explicitly and in a way that
clearly applied to all four kinds of bearer token --- leaving the
reader to wonder if some other encoding is expected.
2016-09-27 16:13:10 -04:00
adieu c42b866ad2 Minor style tweaks. 2016-09-27 17:12:02 +08:00
adieu 838352ff6e Change files in dos format to unix format. Removing ^M. 2016-09-27 17:12:02 +08:00
devin-donnelly ff54de9ae0 Merge pull request #1125 from erictune/rbacgroupref
How to refer to rervice account groups in RBAC
2016-09-26 13:25:14 -07:00
devin-donnelly 53f0dbbe8a Merge pull request #1259 from chmouel/patch-1
minor spelling update
2016-09-26 13:16:05 -07:00
devin-donnelly 971f6a44e7 Merge pull request #549 from mwhooker/patch-1
mark node phase as deprecated
2016-09-26 10:35:35 -07:00
devin-donnelly 98eaa04dc6 Merge pull request #1070 from justinsb/network_plugin_mtu
Document `network-plugin-mtu` option
2016-09-26 10:35:16 -07:00
devin-donnelly 778c119835 Merge pull request #1265 from lukemarsden/master
[WIP] kubeadm and add-on docs
2016-09-26 10:31:43 -07:00
Eric Tune 3750c217ec How to refer to rervice account groups in RBAC 2016-09-26 10:21:27 -07:00
Luke Marsden 10884384de kubeadm and add-ons docs 2016-09-26 14:12:02 +01:00
David Oppenheimer 4a85d6255e Clarify minAvailable approval semantics 2016-09-25 21:30:13 -07:00
Devin Donnelly f4457ae677 Merge remote-tracking branch 'origin' into release-1.4 2016-09-23 16:57:30 -07:00
devin-donnelly 795df8d03e Merge pull request #1276 from madhusudancs/fed-new-deployment
Update the federation admin guide to use the new, simplified deployment mechanism.
2016-09-23 09:55:01 -07:00
Luke Marsden 22a8dbb58e Squashed commits for kubeadm and addons docs. 2016-09-23 14:26:26 +01:00
Madhusudan.C.S 78dccc0366 Address more review comments. 2016-09-22 11:05:18 -07:00
Chmouel Boudjnah d322b78c53 minor spelling update
using mispellings https://pypi.python.org/pypi/misspellings
2016-09-22 11:48:21 +02:00
Madhusudan.C.S af2976b665 Address review comments. 2016-09-22 01:53:56 -07:00
devin-donnelly f2465eec29 Merge pull request #1158 from pallavagarwal07/patch-1
Fix link to kubectl from docs/user-guide/kubectl/kubectl_version.md
2016-09-21 16:28:25 -07:00
devin-donnelly f5e6c1d47b Merge pull request #1196 from derekwaynecarr/disk-eviction
Add documentation for disk based eviction
2016-09-21 15:08:09 -07:00
derekwaynecarr e26aa12e23 Add documentation for disk based eviction 2016-09-21 16:38:35 -04:00
Madhusudan.C.S 80f4dc45fe Update the federation admin guide to use the new, simplified deployment mechanism. 2016-09-20 22:45:55 -07:00
devin-donnelly 3720dcf50d Merge pull request #1246 from calebamiles/release-1.4
Adds documentation for TLS bootstrapping
2016-09-20 13:26:38 -07:00
devin-donnelly 67fb7451ef Merge pull request #1244 from mml/disruption
Add disruption admin guide.
2016-09-20 13:24:08 -07:00
caleb miles d000e77921 Updates docs for TLS bootstrapping.
...now with less passive voice
2016-09-20 09:23:23 -07:00
caleb miles 1cebef8da4 Adds documentation for TLS bootstrapping
Documents workflow for using experimental kublet TLS bootstrapping enabled by https://github.com/kubernetes/features/issues/43
2016-09-20 09:23:23 -07:00
devin-donnelly eacdf9f230 Merge pull request #1213 from markturansky/branch_docs_add
Added pvc quota to docs
2016-09-19 14:57:22 -07:00
Matt Liggett 1117f1a5a6 Add disruption admin guide. 2016-09-19 13:23:40 -07:00
devin-donnelly 56de4ad1e5 Merge pull request #1170 from piosz/rescheduler
Added Rescheduler documentation
2016-09-16 11:08:33 -07:00
markturansky dd8133f716 added pvc quota to docs 2016-09-16 11:39:03 -04:00
Piotr Szczesniak ebd9318f37 Added Rescheduler documentation 2016-09-16 17:02:23 +02:00
Kazuki Suda ef8229f2c6 Fix broken link in the authorization page 2016-09-16 16:23:14 +09:00
Devin Donnelly e0cde221b4 Merge remote-tracking branch 'origin' into release-1.4 2016-09-15 14:40:22 -07:00
devin-donnelly b423faa548 Merge pull request #1188 from ecordell/imagepolicy-webhook-docs
Add ImagePolicyWebhook docs
2016-09-15 14:34:25 -07:00
devin-donnelly e61d5ec4d4 Merge pull request #1216 from Random-Liu/add-node-conformance-test-doc
Add document for node conformance test.
2016-09-15 13:32:55 -07:00
Lantao Liu d56e805a68 Add document for node conformance test. 2016-09-15 11:06:39 -07:00
deads2k 251a6a55f8 describe subjectaccessreview 2016-09-15 13:01:08 -04:00
Pallav Agarwal 36fefcf873 Correct broken links - fix #1154, fix #1161, fix #1162, fix #1163
Fix some broken links in documentation, as well as add a dummy page
for single-node docker with deprecation notice to prevent error with
old links.
2016-09-15 17:26:29 +05:30
devin-donnelly df247395df Merge pull request #1147 from timstclair/aa-docs-1.4
AppArmor documentation
2016-09-14 16:31:07 -07:00
devin-donnelly a380440506 Revert "describe subjectaccessreview" 2016-09-14 14:09:32 -07:00
devin-donnelly ac43058e66 Merge pull request #1219 from deads2k/sar-01
describe subjectaccessreview
2016-09-14 14:08:43 -07:00
deads2k 426b81a497 describe subjectaccessreview 2016-09-14 16:03:05 -04:00
Tim St. Clair 05b2829c7c
AppArmor documentation 2016-09-14 12:49:41 -07:00
Maciej Szulik 78091516e8 Add audit doc 2016-09-14 11:10:55 +02:00
devin-donnelly 4a265eb8e6 Merge pull request #1211 from cjcullen/true
Remove `=true` from gcloud commands
2016-09-13 15:34:31 -07:00
Eric Chiang ec9f1aedc9 docs/admin/authentication: explicitly state the OIDC id_token is used instead of the access_token
Most OAuth2 libraries use the access_token as a bearer token. This
is different for Kubernetes, since the OIDC plugin uses an id_token
instead (also returned in the token response).

Be explicit and call out this difference.
2016-09-13 09:07:52 -07:00
Jan Safranek 93df436435 Add documentation about DefaultStorageClass plugin. 2016-09-13 10:02:17 +02:00
devin-donnelly c11c1f8b04 Merge pull request #1195 from gmarek/nodecontroller1.4
update Node admin doc
2016-09-12 14:58:42 -07:00
Evan Cordell 095f9d436e Add ImagePolicyWebhook docs 2016-09-12 15:26:21 -04:00
CJ Cullen ef63728e62 Remove `=true` from gcloud commands 2016-09-12 11:01:10 -07:00
gmarek 99f7d6d2f1 update Node admin doc 2016-09-12 12:01:02 +02:00
devin-donnelly 27dc318066 Merge pull request #1182 from sttts/sttts-admin-sysctls-1.4
Add docs/admin/sysctls.md
2016-09-09 14:18:18 -07:00
Devin Donnelly 502c2fe184 Merge remote-tracking branch 'origin' into release-1.4 2016-09-08 16:39:34 -07:00
Devin Donnelly 301a3e4da9 Merge branch 'master' into release-1.4 2016-09-08 16:11:25 -07:00
Dr. Stefan Schimanski fe11f5b9b7 Add docs/admin/sysctls.md 2016-09-08 11:59:21 +02:00
devin-donnelly e035d83836 Merge pull request #1166 from ingvagabund/generalize-fedora-steps-for-statis-pods
remove specific Fedora and Kubernetes version when describing configuration
2016-09-07 16:40:26 -07:00
Jan Chaloupka 7608448e4a remove specific Fedora and Kubernetes version when describing configuration 2016-09-06 13:19:47 +02:00
fbsolo 06defce9ef Merge branch 'master' into master 2016-09-04 17:29:58 -07:00
fbsolo 78010d948f Merge branch 'master' of https://github.com/fbsolo/kubernetes.github.io 2016-09-04 17:23:11 -07:00
fbsolo dc0cd5dc65 Fixed broken URL's for Kubernetes.io Dead Link Report (generated 8022) issues #5 and #6 2016-09-04 17:17:53 -07:00
nikhiljindal caa3d8c8e3 Updating docs by running update-imported-docs.sh 2016-09-02 16:23:08 -07:00
Devin Donnelly 2fc0029858 Merged master; fixed merge conflict. 2016-09-01 14:16:13 -07:00
Marek Grabowski 6ebe0c46a2 Update max number of Nodes (#1137) 2016-09-01 11:10:35 -07:00
Alexander Brand c5740ce480 More details around leader election / failure case (#1056) 2016-08-30 14:50:24 -07:00
Derek Carr 7f63196f29 Remove deprecated namespace admission plug-ins (#1079) 2016-08-30 14:28:29 -07:00
fbsolo ca7d19dbc5 Merge branch 'master' into master 2016-08-30 12:00:34 -07:00
Eric Tune d8834d9176 Expand OIDC docs. 2016-08-29 23:01:30 -07:00
fbsolo 6305359afc This sets a URL in authorization.md to point to a specific anchor in cluster-management.md 2016-08-27 01:06:19 -07:00
fbsolo 037957614d This sets a URL in authorization.md to point to a specific anchor in cluster-management.md 2016-08-27 00:49:30 -07:00
fbsolo e172def939 This sets a URL in authorization.md to point to a specific anchor in cluster-management.md 2016-08-27 00:41:59 -07:00
fbsolo 481599f677 Merge branch 'master' of https://github.com/fbsolo/kubernetes.github.io 2016-08-27 00:26:16 -07:00
fbsolo 60065a7882 Fixed anchor target in cluster-management.md to conform to anchor HTML standards in the Kubernetes documentation repo 2016-08-27 00:19:11 -07:00
fbsolo 2a83b573fc Merge branch 'master' into master 2016-08-25 13:19:26 -07:00
fbsolo 664878bd6e Fixes the second issue in the Dead Link Report: broken URL in docs/admin/authorization 2016-08-25 13:12:21 -07:00
fbsolo 2b42de43af Fixes the second issue in the Dead Link Report: broken URL in docs/admin/authorization 2016-08-25 13:07:17 -07:00
fbsolo a83d3b5f18 Fixes the second issue in the Dead Link Report: broken URL in docs/admin/authorization 2016-08-25 12:52:10 -07:00
Jared a6543c31e7 Fixed broken link to "addon" 2016-08-24 14:50:28 -07:00
a-mccarthy 49fcbb7e4a Fixed a broken link on accessing-the-api.md
Corrected link to Admission Control page.
2016-08-23 10:01:24 -04:00
Justin Santa Barbara c135fa4b4f Document `network-plugin-mtu` option 2016-08-20 11:19:51 -04:00
Anirudh Ramanathan 22ee5f3f09 Remove extraneous text left behind by improper merge. 2016-08-15 12:56:36 -07:00
Phillip Wittrock 899d27a16c Push v1.3 release documentation to the live site. 2016-08-12 14:48:32 -07:00
Quinton Hoole 38b464ae58 Merge pull request #1002 from madhusudancs/fed-admin-typo-fixes
Fix the API version for cluster manifest and use --context instead of --cluster in the command line.
2016-08-10 13:29:43 -07:00
Madhusudan.C.S 9b36e64f8a Add a TODO as suggested in the review. 2016-08-10 13:12:32 -07:00
David Eads f540a1e83d Merge pull request #959 from ericchiang/update-authentication-documentation
authentication: add service account and webhook docs and update formatting
2016-08-10 15:43:20 -04:00
Eric Chiang dff59014fc authentication: add service account and webhook docs and update formatting 2016-08-10 12:36:52 -07:00
Phillip Wittrock 9c57adf70f Merge pull request #946 from InQuicker/authz-verbs
Authz: Explain how to determine request verbs.
2016-08-10 11:08:59 -07:00
Madhusudan.C.S 71f9e3441c Fix the API version for cluster manifest and use --context instead of --cluster in the command line. 2016-08-09 12:42:22 -07:00
Phillip Wittrock 2c5e0b4c8b Merge pull request #983 from nikhiljindal/federationdocs
Copying auto generated docs for federation binaries from kubernetes repo
2016-08-08 16:46:28 -07:00
Brad Moylan 017039804a Fix typo in accessing-the-api.md 2016-08-08 09:44:08 -07:00
nikhiljindal 902e2d2b88 Copying auto generated docs for federation binaries from kubernetes repo 2016-08-05 15:57:52 -07:00
Jimmy Cuadra c8135c39a7 Add missing verbs: patch, proxy, and redirect. 2016-08-05 00:39:48 -07:00
Jimmy Cuadra ad328a9f2c Move request attrs section out of ABAC section, add "extra" and subresource fields. 2016-08-03 13:51:53 -07:00
Arnaldo de Moraes Pereira a56804f417 Context on `finalizers` when creating namespaces
Minor explanation on `finalizers` when creating namespaces before pointing to the right documentation.
2016-08-03 17:47:31 -03:00
foxish 0f18a994c2 Removed non-org members from OWNERS. 2016-08-03 01:31:31 -07:00
foxish 66f28bb820 Adding OWNERS for docs. 2016-08-02 18:13:52 -07:00
Jimmy Cuadra ce198ad723 Authz: Explain how to determine request verbs. 2016-08-02 16:37:38 -07:00
Phillip Wittrock 623384061a Merge pull request #945 from madhusudancs/fed-admin-guide-binaries-hyperkube
Update the references to federation control plane images/binaries in the federation admin guide.
2016-08-02 16:24:12 -07:00
Alex Robinson 369a3f6e72 Add ToC and fix markdown formatting in cluster management doc. 2016-08-02 18:38:27 +00:00
Madhusudan.C.S 33b68cd102 Update the references to federation control plane images/binaries in the federation admin guide. 2016-08-01 11:32:15 -07:00
Kelsey Hightower 7bd0d94d0e Merge pull request #883 from lukaszo/da
Update DaemonSet docs about node affinity
2016-07-29 07:54:13 -07:00
Sha 3e8d78fd5c Update index.md
typo fix `etcd get foo` => `etcdctl get foo`
2016-07-29 16:42:32 +08:00
Kelsey Hightower 76788af325 fix typo 2016-07-28 12:58:49 -07:00
Kelsey Hightower 143baf2eeb Merge pull request #335 from colemickens/fix-admission-controllers
admin: update recommended admission controllers
2016-07-28 12:56:47 -07:00
Kelsey Hightower 6bed6f4b82 Merge pull request #581 from kubernetes/ghodss-patch-1
Update cluster-management.md
2016-07-28 12:51:34 -07:00
Kelsey Hightower 26c4910679 Merge pull request #913 from caseydavenport/update-calico-blurb
Update Calico blurb
2016-07-28 11:01:46 -07:00
Ihor Dvoretskyi 3695094224 Weave links fixes
Updated links referring to weave documentation.
2016-07-28 13:16:14 +03:00
Casey Davenport b56eff2384 Update Calico blurb 2016-07-26 16:51:55 -07:00
Brian Grant 9a65ea1758 Merge pull request #791 from freehan/network-plugin-dir
clearify network-plugin-dir for different network plugins
2016-07-25 21:59:09 -07:00
Łukasz Oleś d7e0faefcf Update DaemonSet docs about node affinity
After merging kubernetes/kubernetes#28803 DaemonSets can also
be scheduled using node affinity.
2016-07-20 15:09:57 +02:00
johndmulhausen 1c1941c800 Merge pull request #848 from InQuicker/rbac-api-group-name
Use correct API group name for RBAC.
2016-07-19 15:14:48 -07:00
Phillip Wittrock c64f154b81 Merge pull request #646 from andrewmichaelsmith/patch-1
GC gc's unused images, not unreferenced
2016-07-19 12:09:09 -07:00
Phillip Wittrock 41374496e9 Merge pull request #811 from justinsb/multizone_fixes
Two minor fixes to multizone doc
2016-07-15 08:22:21 -07:00
Phillip Wittrock 248e2b3bd5 Merge pull request #654 from rata/node-conditions
Document all node conditions in k8s 1.2
2016-07-15 07:55:44 -07:00
Jimmy Cuadra f1d7b1c9c5 Use correct API group name for RBAC. 2016-07-14 19:37:39 -07:00
Johanan Lieberman ff50399b6f Add missing closing parantheses 2016-07-15 02:48:52 +03:00
Eric Tune ddf532e786 Merge pull request #809 from erictune/authadm-b
Mention runtime-config flag for RBAC.
2016-07-12 09:38:29 -07:00
johndmulhausen 63ac596470 Merge pull request #798 from alena1108/dnsaddonlinkfix
Broken link fix on dns doc page
2016-07-11 10:32:21 -07:00
Justin Santa Barbara 272814cdb2 Two minor fixes to multizone doc 2016-07-10 17:36:55 -04:00
Eric Tune bda17741b3 Mention runtime-config flag for RBAC. 2016-07-10 08:10:48 -07:00
Eric Tune a9f8a8eb56 authentication, authorization, admission overview
Added diagram too.
2016-07-10 07:11:17 -07:00
Eric Tune 20fed78fc7 Remove not useful text from accessing-the-api 2016-07-10 07:00:27 -07:00
Eric Tune 554e5e0def Remove reference to old nginx proxy, and port 6443
Port 6443 is still a default, but not commonly used
byt setup scripts.
2016-07-10 07:00:27 -07:00
Eric Tune f9fed7fe49 Remove reference to long-gon readonly port 2016-07-10 07:00:27 -07:00
Alena Prokharchyk dfb8da7e54 Broken link fix on dns doc page 2016-07-08 14:15:48 -07:00
Minhan Xia 8f65764acb add usage summary for network plugins 2016-07-07 14:37:29 -07:00