Commit Graph

70 Commits

Author SHA1 Message Date
yanggang ad52e828b5
Fix KinD typos in en docs.
Signed-off-by: yanggang <gang.yang@daocloud.io>
2023-11-08 22:12:26 +00:00
dancer13 1d7e34fcf2
refactor(content.en.docs.tutorials.security.SecComp): add sha to kindes/node image 2023-10-31 09:48:12 +01:00
dancer1325 7df7e9dd7e fix(content.en.docs.tutorials.security.SecCommp): switch to newer kindes/node version 2023-10-30 18:17:20 +01:00
PranitRout07 9b302b4da2
Ensure all letters in kind are in lowercase
I have found the word 'kind' is written like 'KinD'.So i have changed all the letters in 'KinD' to lowercase.
2023-09-29 07:19:35 +05:30
Mengjiao Liu e8b136c3b3 Use code_sample shortcode instead of code shortcode 2023-09-05 17:10:14 +08:00
Qiming Teng 07f224714a Fix links
This PR fixes some link errors as discovered by the `linkchecker.py` tool.
2023-08-31 21:11:57 +08:00
Tim Bannister a56d96f4b6 Use code shortcode for Tutorials section
Replace legacy codenew shortcode with code shortcode.
2023-07-31 14:43:14 +01:00
Marcelo Giles ee171ac8c8
Fix runtime sentence 2023-07-28 10:38:04 -07:00
Marcelo Giles 2c31509aa9
Merge branch 'main' into 31536_seccomp_tutorial_add_prereqs 2023-07-25 12:16:22 -07:00
Andrey Goran eb522c126f
Replace {{< codenew ... >}} with {{% codenew ... %}} in all English docs (#42180)
* Replaced {{< codenew ... >}} with {{% codenew ... %}} in all files

* Reverted changes in non-english localizations
2023-07-25 05:54:06 -07:00
Kubernetes Prow Robot dd9c5380f3
Merge pull request #39961 from Dhairya-Arora01/addLine
Improvement for the security docs
2023-07-10 18:21:11 -07:00
Dhairya Arora df2613671a
Update content/en/docs/tutorials/security/_index.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2023-07-10 18:50:04 +05:30
Marcelo Giles 2a642c11de
Add docker prereq, mention podman and rearrange sections 2023-07-10 01:04:41 -07:00
AmarNathChary bfeaca1b59 removed hyperlink in restrict a container 2023-05-16 10:45:31 +05:30
Tim Bannister 50d7e85643
Migrate from fullVersion param to skew shortcode
Use {{< skew currentPatchVersion >}} to render the latest patch version
for the minor release being documented.
2023-05-02 23:25:30 +01:00
Sascha Grunert 3648d983c6
[KEP-2413] Add docs for SeccompDefault graduation
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-03-27 13:45:50 +02:00
Dhairya-Arora01 7ea1ad7bef
Update content/en/docs/tutorials/security/_index.md
Co-authored-by: Nitish Kumar <justnitish06@gmail.com>
2023-03-16 21:58:22 +05:30
Dhairya-Arora01 3cc3620a0c a little change 2023-03-13 14:28:30 +00:00
Dhairya-Arora01 1336d6d838 Changed tThe o Kubernetes project instead of we 2023-03-13 14:22:49 +00:00
Dhairya-Arora01 5e058fdc42 Improvement for the security docs 2023-03-13 07:37:03 +00:00
Mickey Boxell 987edf7ef0 Merge remote-tracking branch 'upstream/main' into dev-1.27 2023-03-06 19:22:46 -06:00
Tim Bannister 3c8df5ea55 Mention that cluster-level PSA config might not be possible
Some managed clusters don't let you configure PSA cluster wide, and
users might not realize this unless we tell them.
2023-03-02 22:39:41 +00:00
Tim Bannister c9640ebc32 Make it clear that PSA example Pods do start OK
The reader sees a warning, but the Pods do run. That detail might not be
obvious otherwise.
2023-03-02 22:39:41 +00:00
Tim Bannister a39ee496fe Tidy PSA tutorials
Various tidying to match website style guide better.
2023-03-02 22:39:41 +00:00
Tim Bannister 25a926e465 Assume that kind provides Pod Security Admission
Given that Pod Security Admission has been beta and then generally
available for a while, assume that kind gives the reader a cluster than
includes this feature.
2023-03-02 22:39:41 +00:00
Tim Bannister c38e5c00fb Avoid creating local manifest for PSA tutorials
The kubectl tool includes a client for fetching manifests using HTTP,
and we usually rely on that for tutorials. Switch to an approach where
we don't create a manifest on the filesystem and then apply that.
2023-03-02 22:39:41 +00:00
Kubernetes Prow Robot 3a7fab6118
Merge pull request #39630 from reylejano/merged-main-dev-1.27
Merged main into dev-1.27 branch
2023-02-24 04:55:38 -08:00
Kubernetes Prow Robot 24cde2766a
Merge pull request #39103 from windsonsea/lvlpss
Fix indentations in cluster-level-pss.md
2023-01-27 02:44:26 -08:00
Michael bfc82d5f9f Fix indentations in cluster-level-pss.md 2023-01-27 11:04:26 +08:00
shubham82 9ae7378b1a Resolved nit. 2023-01-26 11:43:25 +09:00
shubham82 07995d0fab Improved the content Flow. 2023-01-26 11:26:52 +09:00
shubham82 d3e7c23d07 Improvement: Added shell code block snippet to the commands. 2023-01-23 16:38:22 +09:00
Sascha Grunert c1bf88e71e
Update seccomp docs for v1.27
seccomp annotation will become non-functional in v1.27, which will be
now reflected in the documentation as well.

Ref: https://github.com/kubernetes/kubernetes/pull/114947

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-01-18 14:28:07 +01:00
Abigail McCarthy 06b957d01d Update page weights in tutorial/security section 2023-01-10 11:42:58 -05:00
Parthava Adabala aa08044428
Fix: Grammar
Corrected subject verb disagreement.
2022-10-25 17:32:10 +05:30
Thomas Balthazar 0e31a40737
Update deprecated kubectl command in apparmor doc
Running `kubectl exec <pod_name> <command>` is deprecated:
```
kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl exec [POD] -- [COMMAND] instead
```
It should be: `kubectl exec <pod_name> -- <command>`
2022-10-08 11:31:58 +02:00
Kubernetes Prow Robot 031f87ed5f
Merge pull request #36501 from liggitt/podsecurity-ga
Update pod security configuration docs for v1
2022-09-20 07:23:20 -07:00
Alex Pakalniskis 61ce6e27ef
Fix cluster cleanup command 2022-09-10 12:28:01 -07:00
Kubernetes Prow Robot 3b1fe5b658
Merge pull request #35217 from tengfei86/patch-3
Revise use of jsonpath in AppArmor tutorial
2022-09-07 09:40:38 -07:00
Jordan Liggitt 7eba57d4de
Update pod security configuration docs for v1 2022-09-01 17:29:53 -04:00
carolina valencia 6810fa976d Merge remote-tracking branch 'upstream/main' into dev-1.25 2022-08-18 15:58:41 -03:00
Kubernetes Prow Robot b268418615
Merge pull request #33524 from saschagrunert/seccomp-annotation
Partly remove support for seccomp annotations
2022-08-15 19:15:07 -07:00
Jordan Liggitt b167938367 Scrub PSP docs for 1.25 2022-08-15 21:09:41 -04:00
ydFu 8183d5a62d Fix the extra '{' or '}'
Signed-off-by: ydFu <ader.ydfu@gmail.com>
2022-08-14 15:36:13 +08:00
windsonsea c09bf07d6c updated /tutorials/security/seccomp.md 2022-08-13 10:48:09 +08:00
William Steinford d6a1ba2a6d Fix the grammar by using the verb form 'set up' where appropriate instead of the noun 'setup' 2022-08-08 16:48:26 -04:00
Sascha Grunert 45d0bdeaec
Partly remove support for seccomp annotations
From the release notes of
https://github.com/kubernetes/kubernetes/pull/109819, we have to update
according to the following situation:

```
Action required: support for the alpha seccomp annotations
`seccomp.security.alpha.kubernetes.io/pod` and
`container.seccomp.security.alpha.kubernetes.io`, deprecated since
v1.19, has been partially removed. Kubelets no longer support the
annotations, use of the annotations in static pods is no longer
supported, and the seccomp annotations are no longer auto-populated when
pods with seccomp fields are created. Auto-population of the seccomp
fields from the annotations is planned to be removed in 1.27. Pods
should use the corresponding pod or container
`securityContext.seccompProfile` field instead.
```

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-08-02 13:42:23 +02:00
bladepoint f312e8ba9f
Update apparmor.md
this is a  better way to use jsonpath
2022-07-21 16:41:16 +08:00
Sascha Grunert 641a8e2c0c
Improve 'Seccomp defaulting' feature name
We're now rephrasing those two paragraphs to avoid confusing readers.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-07-19 09:03:20 +02:00
Kubernetes Prow Robot 6effba1cae
Merge pull request #34640 from saschagrunert/seccomp-default-beta
Graduate SeccompDefault feature to beta
2022-07-16 06:52:53 -07:00