b749f91f12
Document avoiding plain text retrieval
...
When you have set up your cluster for encryption at rest, you can take
this defence in depth measure to make sure that anything held without
encryption causes a retrieval error (which is then more likely to flag
that there is a problem).
2024-01-02 11:14:30 +00:00
8b46ec4047
Fix several link errors
2024-01-01 21:15:50 +08:00
6a7240f55b
fix serviceaccount-token-volume-projection link
2023-12-28 21:39:19 +08:00
c807f97145
Merge pull request #44355 from hunshcn/sysctl
...
update safe sysctls (v1.29)
2023-12-27 12:44:29 +01:00
0f285fd32d
Merge pull request #44085 from sftim/20231125_explain_protection_encryption_keys
...
Explain more about protection for encryption keys (API data encryption at rest)
2023-12-26 07:18:49 +01:00
fc8e79b96c
update safe sysctl
...
Signed-off-by: hunshcn <hunsh.cn@gmail.com>
2023-12-25 10:47:54 +08:00
d536e46dbd
fix typos
2023-12-24 21:00:53 -05:00
ada845e5e1
Link to KMS setup doc
2023-12-22 11:33:36 +00:00
9f8b35d93f
Redo API encryption at rest explanation
...
- Explain importance of protecting keys and other material that can be
used to decrypt data in etcd
- Revise the explanation for a non-KMS setup example
2023-12-22 11:33:36 +00:00
bd4d92763f
Merge pull request #44043 from steve-hardman/fix-kubectl-mac-step
...
Fix cleanup instruction in macOS kubectl installation page
2023-12-22 07:45:54 +01:00
967593f3dd
Merge pull request #44266 from adityasamant25/issue-32835
...
Changes to reflect the deprecation of pod-manifest-path argument
2023-12-22 07:43:12 +01:00
7b3ebb32fb
Merge pull request #43634 from able8/patch-1
...
Fixed a typo on page "Create an External Load Balancer"
2023-12-22 03:56:37 +01:00
9e097396b9
use image from DUMMY_SERVER in the example
2023-12-22 10:31:25 +08:00
057c9633a3
Merge pull request #44227 from windsonsea/changey
...
Clean up change-default-storage-class and access-cluster-api tasks
2023-12-22 02:21:22 +01:00
28c702a195
Merge pull request #44095 from sftim/20231126_improve_job_tutorials
...
Improve tutorials for Job
2023-12-21 18:21:31 +01:00
5605ae7b99
fix the Chinese single quotes in the code to English single quotes
2023-12-20 17:06:26 +08:00
74f94da59e
Merge pull request #44408 from testwill/patch-3
...
fix: container not sandbox
2023-12-20 09:40:21 +01:00
242296af2a
Remove extra character
...
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
2023-12-20 00:34:51 +00:00
80353185f5
Remove extra character
2023-12-19 23:17:19 +00:00
d1d6eda640
Clean up change-default-storage-class.md
2023-12-19 08:57:48 +08:00
7ffd84798f
Fix broken hyperlink for 'Cosign Keyless Signatures' in "Verify Signed Kubernetes Artifacts" guide ( #44235 )
...
* fix broken links to cosign signing page
* remove changes to zn translation
* change link to https://docs.sigstore.dev/signing/overview/
2023-12-18 11:08:33 +01:00
9b28c20c8b
fix: container not sandbox
2023-12-18 10:45:01 +08:00
e9c2827477
Fix a link in custom-resource-definitions task
2023-12-15 09:07:10 +08:00
119a085a55
Merge pull request #44086 from sftim/20231125_link_to_decrypt_task
...
Link to existing task about decrypting at rest
2023-12-14 09:32:58 +01:00
674448db34
Merge pull request #44349 from tengqm/configapi-1.29
...
Config API for v1.29
2023-12-14 09:12:39 +01:00
98dcbddc6b
Merge pull request #44322 from adityasamant25/issue-44321
...
Add user guidance comment for executing drain and uncordon on control plane
2023-12-14 03:29:00 +01:00
2fe79a7c28
Update references to the config APIs
2023-12-14 09:24:12 +08:00
3a13717a34
Issue 44321 - added comments to emphasize that the drain and uncordon commands must be executed on a control plane node.
...
Apply suggestions from code review
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
2023-12-13 16:52:08 +05:30
e57cf329a6
Merge 'dev-1.29' with main
2023-12-11 17:11:37 +00:00
0c5cb411ea
Merge pull request #43871 from neolit123/1.29-add-task-for-kubeadm-generate-csr
...
kubeadm: add section on how to use the "generate-csr" command
2023-12-11 17:39:47 +01:00
8a0a983d32
Changes to reflect the deprecation of pod-manifest-path argument
...
Changes to reflect the deprecation of pod-manifest-path argument
Update content/en/docs/tasks/configure-pod-container/static-pod.md
Review comments implemented.
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
Review comments implemented.
2023-12-10 08:25:11 +05:30
0f9c965105
Merge branch 'main' into dev-1.29
2023-12-09 20:20:23 +00:00
db823732b5
Merge pull request #43668 from pegasas/stringdata
...
Document snag with Secrets, stringData, and server-side apply
2023-12-08 03:31:14 +01:00
7e75688d69
Improve tutorials for Job
...
Co-authored-by: Kundan Kumar <kundan.kumar@india.nec.com>
2023-12-07 19:49:24 +00:00
45fb394ca7
Merge main into dev-1.29 to maintain sync
2023-12-07 15:59:56 +00:00
636d7fee9b
Merge pull request #44153 from Rajdeep1311/patch-1
...
Minor text changes to the index of tasks/debug/debug-cluster
2023-12-07 14:22:36 +01:00
5e5e9fc252
Merge pull request #44170 from hunshcn/sysctl
...
update safe sysctls
2023-12-07 14:15:01 +01:00
08108c79cc
Merge pull request #44075 from tamilselvan1102/k8s-doc-web-20231124-1
...
Fix broken Telepresence link in the debugging guide
2023-12-05 01:31:39 +01:00
4506d77590
Merge pull request #44162 from my-git9/verify-kubectl-en1
...
improve format for included/verify-kubectl.md
2023-12-05 01:29:11 +01:00
7b2723fba7
FIx the remove step
...
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
2023-12-03 19:17:24 +00:00
bb2cb5fa86
update sysctl-cluster.md, pod-security-standards.md
...
Signed-off-by: hunshcn <hunsh.cn@gmail.com>
2023-12-01 14:47:36 +08:00
b91eca6be2
Fix rendering issue in tab layout
2023-12-01 01:20:33 +00:00
5acc639bef
improve format for included/verify-kubectl.md
...
Signed-off-by: xin.li <xin.li@daocloud.io>
2023-11-30 22:36:41 +08:00
812e0f8b85
Add details in kubeadm-reconfigure.md for etcd
...
The kubeadm init phase doesn't permit to reconfigure the etcd yaml manifest (when etcd is in local mode)
Adding the right command when etcd needs to be reconfigured
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
2023-11-30 14:08:05 +01:00
df789a5e48
Update _index.md
2023-11-30 12:48:49 +05:30
deaf1b920a
Merge remote-tracking branch 'upstream/main' into dev-1.29
2023-11-29 15:33:49 -06:00
1efeb86821
Update verify-kubectl.md
2023-11-29 21:43:11 +05:30
708220bb13
Update content
...
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2023-11-29 19:40:47 +05:30
c0a72d25d8
added doc for setting up cloud provider kubectl auth via plugin
...
Signed-off-by: GitHub <noreply@github.com>
2023-11-29 13:26:04 +00:00
dff94b84bc
KEP-1880 Multiple ServiceCIDR
2023-11-29 00:19:38 +00:00
f10369c1f5
changes done as per reviews
...
Signed-off-by: GitHub <noreply@github.com>
2023-11-28 05:58:17 +00:00
d0f79ad397
Fix the remove step
...
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
2023-11-27 17:59:34 +00:00
fdcd1f6a49
Merge pull request #43560 from alexzielenski/4008-beta
...
KEP-4008: CRD Validation Ratcheting - Alpha 2 Docs
2023-11-27 18:23:40 +01:00
6f44e15b56
typo fix
2023-11-27 09:17:40 -08:00
41e0c2f21b
jpbetz feedback
2023-11-27 09:08:09 -08:00
02aa31cc33
changes
...
Signed-off-by: GitHub <noreply@github.com>
2023-11-27 15:24:26 +00:00
70e2beb2f5
added note for redirect of http probe
...
Signed-off-by: GitHub <noreply@github.com>
2023-11-27 05:53:41 +00:00
1f082c2e16
Link to existing task about decrypting at rest
2023-11-25 19:17:05 +00:00
da5638ce17
Merge pull request #43417 from chrishenzie/readwriteoncepod-ga
...
Graduate ReadWriteOncePod to GA
2023-11-25 17:50:31 +01:00
802dde6897
Solves issue: #44034
2023-11-24 16:55:07 +05:30
a7cdaf6c2e
Fxi the remove step
2023-11-23 00:16:07 +00:00
2d9fbc1c7e
Merge remote-tracking branch 'upstream/main' into dev-1.29
2023-11-22 22:07:26 +00:00
fb8f9b844a
Merge pull request #43841 from windsonsea/clusty
...
Clean up access-application-cluster/access-cluster
2023-11-22 10:01:19 +01:00
d174742c46
kubeadm: add section on how to use the "generate-csr" command
...
The "generate-csr" command is useful in cases users don't
wish to use the default certificate duration that kubeadm has
hardcoded to 1 year. The command can also be used when the
certificate rotation process is done manually, out of bounds
with an external CA.
2023-11-22 08:32:30 +02:00
c07ce392e4
Graduate ReadWriteOncePod to GA
...
Included is a task for migrating existing PersistentVolumes to use
ReadWriteOncePod, taken from the alpha blog post.
2023-11-21 09:35:09 -08:00
92a8fce75d
Merge pull request #43398 from aramase/aramase/d/kep_3299_stable_doc_update
...
[KMSv2] add docs for KMSv2 GA
2023-11-21 11:46:23 +01:00
8b9f3f84aa
review feedback
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-11-20 17:25:48 +00:00
f893a19ee6
Resolved merge conflict when merging main into dev-1.29 branch
2023-11-19 16:02:40 +01:00
8598729e5d
update docs for KMSv2 and KMSv2KDF stable
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-11-17 18:19:45 +00:00
43c7d05eb9
Merge pull request #43958 from enj/enj/d/sa_node_ref
...
KEP-4193: bound service account token improvements
2023-11-17 15:49:05 +01:00
42c9e4e20f
KEP-4193: bound service account token improvements
...
Signed-off-by: Monis Khan <mok@microsoft.com>
2023-11-16 08:48:59 -05:00
cfbe80de55
Merge pull request #43441 from cici37/2876-1.29
...
[KEP-2876] Document (GA) CEL validation for custom resources
2023-11-16 05:31:45 +01:00
16fb2e68c6
Promote CRD validation rules to GA
2023-11-15 23:19:55 +00:00
294a3738c3
Merge pull request #43827 from AmarNathChary/Updated_warning_in_readiness_probes
...
Updated warning in readiness probes
2023-11-15 07:49:34 +01:00
fb1bd2217d
Merge main into dev-1.29 to keep in sync
2023-11-14 21:22:12 +00:00
d820f2b988
add CRDValidationRatcheting 1.29 docs
2023-11-14 10:56:26 -08:00
d0285498d2
Merge pull request #43773 from alculquicondor/job-finalizer-troubleshoot
...
Troubleshooting for job pod finalizers
2023-11-13 17:19:22 +01:00
46df889039
Troubleshooting for job pod finalizers
2023-11-13 11:00:14 -05:00
4163d74fa5
Additional clarifications for changing package repository
...
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2023-11-13 13:36:11 +01:00
57ad2f9995
Updated_the_warning_in_readiness_probes
2023-11-10 10:10:43 +05:30
1f306bce12
updated warning in readiness probes
2023-11-08 09:53:08 +05:30
369317b855
Rephrased with slightly better English
...
update with comment from shubham82 . thanks a lot!
2023-11-07 17:27:03 -03:00
7e323ad800
Clean up access-application-cluster/access-cluster
2023-11-07 15:09:00 +08:00
887d2d810a
Clean up access-cluster-services.md
2023-11-07 07:52:43 +08:00
822b15d7db
Updated waring in readiness probes
2023-11-06 11:24:23 +05:30
e5ff980054
Update configure-upgrade-etcd.md
...
Precision on --data-dir option when restoring etcd cluster
2023-11-05 15:32:15 +01:00
80483fe91f
Add a clarification for autoscaling on minikube
...
Added a very small clarification on how to run this guide on `minikube`.
2023-11-03 13:33:32 -03:00
7db05a8b31
Merge remote-tracking branch 'upstream/main' into dev-1.29
2023-11-02 11:11:08 -05:00
636f1d8f7e
Merge pull request #43540 from neolit123/1.29-add-super-admin-kubeconfig
...
kubeadm: introduce documentation changes for super-admin.conf
2023-10-31 03:03:57 +01:00
a9478b46ac
kubeadm: introduce documentation changes for super-admin.conf
...
- Update most pages where the kubeadm generated admin.conf
is discussed. Include information about the new file "super-admin.conf".
2023-10-30 11:57:44 +02:00
fba4f6cb2f
Removed outdated information for SA and Added the Note for Manually created Secret API objects. ( #43451 )
...
* Removed outdated information for SA and Added the Note for Manually created Secret API objects.
* Modified the Note.
* Simplified the Note.
2023-10-26 02:50:01 +02:00
189cdb3524
Merge pull request #43537 from profnandaa/enhancement/huge-pages-docs
...
hugepages: add some details on allocation
2023-10-24 12:28:34 +02:00
920a68b536
Document snag with stringData and server-side apply
2023-10-24 14:54:07 +08:00
8ae01d5d8e
Fixed title level of "Validation rules" on custom-resource-definitions.md
...
The title level of "Validation rules" should be H3, instead of H2.
2023-10-22 22:17:18 +08:00
28c7a312af
Fixed a typo on page "Create an External Load Balancer"
...
Replace `_NumNodes` with `NumNodes`
2023-10-22 18:49:50 +08:00
ca2b3023e7
Update scheduling-hugepages.md
2023-10-18 13:15:01 +08:00
9803cdc16a
hugepages: add some details on allocation
...
This commit add a little more details on pre-allocation
and dynamic allocation of huge pages on the node.
It also links to the Linux documentation for further
details but gives a quick example on multiple page sizes
that is not very obvious from the Linux documentation
currently.
Signed-off-by: Anthony Nandaa <profnandaa@gmail.com>
2023-10-18 06:31:21 +03:00
2d8edf7829
Update enforce-standards-admission-controller.md
...
It seems comment was set to a wrong field. There is no need to change apiserver.config.k8s.io/VERSION, we need to modify only pod-security.admission.config.k8s.io/VERSION
2023-10-17 14:00:40 +03:00
e4a2ab2bd0
Update upgrade guides to clarify that legacy repos are frozen ( #43472 )
...
* Add legacy-repos-deprecation shortcode and localization
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
* Update install/upgrade guides to clarify that legacy repos are frozen
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
* Update the legacy repos message
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
---------
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2023-10-17 03:37:39 +02:00
7d1095b265
Merge pull request #43444 from steve-hardman/fix-issue43431-layout
...
Fix broken page layout for "Install and Set Up kubectl on Linux"
2023-10-15 20:43:48 +02:00
Tim Bannister