Commit Graph

775 Commits

Author SHA1 Message Date
Cao Shufeng 14df916093 Update NamespaceLifecycle admission controller 2017-08-01 00:34:29 -07:00
Lachlan Evenson 723bdc97a8 Update TLS bootstrapping docs (#4490)
* Add bootstrap tokens reference
Update kubelet required flags

* update kubelet flag

* update bootstrap tokens to add alpha wording

* update authorization provider background and standardize on system:bootstrappers group

* made kubelet requirements more prominant

* fix grammar

* wording updates based on review

* update md links
2017-07-31 23:55:48 -07:00
Davanum Srinivas cdaeaa56fe Fix Typo - "TokenAccessReviewStatus" -> "status" (#4475)
* Fix Typo - "TokenAccessReviewStatus" -> "status"

"TokenAccessReview" is the value of the "kind" field of the request and response. The webhook has to fill in the "status" field to indicate authenticate pass/fail status.

* Use back ticks for spec

For consistency highlight spec better using back ticks
2017-07-31 23:53:04 -07:00
Ahmet Alp Balkan acef396611 Fix typos and add a paragraph for initializers doc (#4369)
* Fix typos and add a paragraph for initializers doc

- Fixed a few consistency issues and typos in the doc
- Also fixed an username typo in assignees
- Added a paragraph explaining how the example initializerconfiguration will
  be applied once it is created.

Signed-off-by: Ahmet Alp Balkan <ahmetb@google.com>

* Add .pending to metadata.initializers, re-wording

Signed-off-by: Ahmet Alp Balkan <ahmetb@google.com>
2017-07-31 23:15:39 -07:00
Davanum Srinivas 11238eea0e Fix Typo - Initializer should be Initializers
Looking at the code, the right string to set in --admission-control would be `Initializers`:
https://github.com/kubernetes/kubernetes/blob/master/plugin/pkg/admission/initialization/initialization.go#L43
2017-07-31 17:21:10 -07:00
Davanum Srinivas 41ad364646 Fix Typo - "SubjectAccessReviewStatus" -> "status"
- "SubjectAccessReview" is the value of the "kind" field of the request and response. The webhook has to fill in the "status" field to indicate authorization passed or failed.
- For consistency highlight spec better using back ticks
2017-07-28 09:55:45 -07:00
liyao c4b110a08c fix some writen mistake
rm duplicated `resource` and insert a space between `during` and `leader` both at line 57
2017-07-24 09:43:48 -07:00
MofeLee b325abf830 Update authentication.md 2017-07-17 14:16:42 +08:00
ymqytw 5827f51779 sync imported docs 2017-07-14 23:18:04 -07:00
Ahmet Alp Balkan 0667180dd4 Remove self-links with domain names in docs (#4299)
* Remove self-links with domain names in docs

Fixes #4191. Skipping the tutorials we import from kubernetes/examples.

Signed-off-by: Ahmet Alp Balkan <ahmetb@google.com>

* update federation/index.md user-guide links

* update assign-pod-node.md links

* update dns-pod-service.md link

* update link in jobs-run-to-completion.md

* update link in minikube.md

* update PS link in minikube.md

* update links in stackpoint.md

* update links in storage.md

* fix link in vsphere.md

* fix links in deprecation-policy.md

* Update pick-right-solution.md

* Update web-ui-dashboard.md

* Update ingress.md

* Update federation-service-discovery.md

* Update user-guide.md

* Update expose-external-ip-address.md

* Update README.md

* Update README.md
2017-07-10 15:13:19 -07:00
jianglingxia 797b769ad8 nodes.md change v1.6 to v1.7 (#4327)
* change v1.6 to v1.7

Signed-off-by: jianglingxia <jiang.lingxia@zte.com.cn>

* update it
2017-07-10 11:19:45 -07:00
Chao Xu e792a9f383 fix a bug in the example initializerconfiguration 2017-07-05 15:06:37 -07:00
Mik Vyatskov 8deadb5815 Remove link to the removed code in Kubernetes repo 2017-07-05 13:23:23 -07:00
Fabrizio Pandini 30fd81db49 remove duplicate paragraph in "kubeadm Setup Tool Reference Guide" (#4260)
* remove duplicate paragraph

* remove duplicate paragraph
2017-07-05 11:44:43 -07:00
Cao Shufeng c806114c1d remove dead link
There is no "kubectl" section in this page. And non-resource urls do not
have too much relationship with kubectl(At least I think so), so we
don't need "see kubectl"
2017-07-03 09:41:30 -07:00
Lucas Käldström b9f0a5d0f4 Add an explanation of how the kubeadm kubelet dropin file works and a note about cAdvisor 2017-06-30 01:19:35 -07:00
zhangchaolei aae3bfaf3e Release 1.7 (#4094)
* Minor fixes in the Deployment doc

Signed-off-by: Michail Kargakis <mkargaki@redhat.com>

* add NodeRestriction to admission-controllers (#3842)

* Admins Can Configure Zones in Storage Class

The PR #38505 (https://github.com/kubernetes/kubernetes/pull/38505) added zones optional parameter to Storage Class for AWS and GCE provisioners.

That's why documentation needs to be updated accordingly.

* document custom resource definitions

* add host paths to psp (#3971)

* add host paths to psp

* add italics

* Update ConfigMap doc to explain TTL-based cache updates (#3989)

* Update ConfigMap doc to explain TTL-based cache updates

* swap word order

Change "When a ConfigMap being already consumed..." to "When a ConfigMap already being consumed..."

* Update NetworkPolicy docs for v1

* StorageOS Volume plugin

* Update GPU docs

* docs: HPA autoscaling/v2alpha1 status conditions

This commit documents the new status conditions feature for HPA
autoscaling/v2alpha1.  It demonstrates how to get the status conditions
using `kubectl describe`, and how to interpret them.

* Update description about NodeRestriction

kubelet node can alse create mirror pods for their own static pods.

* adding storage as a supported resource to node allocatable

Signed-off-by: Vishnu kannan <vishnuk@google.com>

* Add documentation for podpreset opt-out annotation

This adds the annotation for having the podpreset admission controller
to skip (opt-out) manipulating the pod spec.

Also, the annotation format for what presets have acted on a pod has
been modified to add a prefix of "podpreset-". The new naming makes it such
that there is no chance of collision with the newly introduced opt-out
annotation (or future ones yet to be added).

Opt-out annotation PR:
kubernetes/kubernetes#44965

* Update PDB documentation to explain new field (#3885)

* update-docs-pdb

* Addressed erictune@'s comments

* Fix title and add a TOC to the logging concept page

* Patch #4118 for typos

* Describe setting coredns server in nameserver resolv chain

* Address comments in PR #3997.

Comment is in
f6eb59c67e (diff-7a14981f3dd8eb203f897ce6c11d9828)

* Update task for DaemonSet history and rollback (#4098)

* Update task for DaemonSet history and rollback

Also remove mentions of templateGeneration field because it's deprecated

* Address comments

* removed lt and gt as operators (#4152)

* removed lt and gt as operators

* replace lt and gt for node-affinfity

* updated based on bsalamat review

* Initial draft of upgrade guide for kubeadm clusters.

In-place upgrades are supported between 1.6 and 1.7 releases. Rollback
instructions to come in a separate commit.

Fixes https://github.com/kubernetes/kubeadm/issues/278

* Add local volume documentation (#4050)

* Add local volume documentation

* Add PV local volume example

* Patch PR #3999

* Add documentation for Stackdriver event exporter

* Add documentation about controller metrics

* Federation: Add task for setting up placement policies (#4075)

* Add task for setting up placement policies

* Update version of management sidecar in policy engine deployment

* Address @nikhiljindal's comments

- Lower case filenames
- Comments in policy
- Typo fixes
- Removed type LoadBalancer from OPA Service

* Add example that sets cluster selector

Per-@nikhiljindal's suggestion

* Fix wording and templating per @chenopis

* PodDisruptionBudget documentation Improvements (#4140)

* Changes from #3885

Title: Update PDB documentation to explain new field
Author: foxish

* Added Placeholder Disruptions Concept Guide

New file: docs/concepts/workloads/pods/disruptions.md
Intented contents: concept for Pod Disruption Budget,
 cross reference to Eviction and Preemption docs.
Linked from: concepts > workloads > pods

* Added placeholder Configuring PDB Task

New file: docs/tasks/run-application/configure-pdb.md
Intented contents: task for writing a Pod Disruption Budget.
Linked from: tasks > configuring-applications > configure pdb.

* Add refs to the "drain a node" task.

* Refactor PDB docs.

Move the "Requesting an eviction" section from:
docs/tasks/administer-cluster/configure-pod-disruption-budget.md
-- which is going away -- to:
docs/tasks/administer-cluster/safely-drain-node.md

The move is verbatim, except for an introductory sentence.

Also added assignees.

* Refactor of PDB docs

Moved the section:
Specifying a PodDisruptionBudget
from:
docs/tasks/administer-cluster/configure-pod-disruption-budget.md
to:
docs/tasks/run-application/configure-pdb.md
because that former file is going away.
Move is verbatim.

* Explain how Eviction tools should handle failures

* Refactor PDB docs

Move text from:
docs/tasks/administer-cluster/configure-pod-disruption-budget.md
to:
docs/concepts/workloads/pods/disruptions.md

Delete the now empty:
docs/tasks/administer-cluster/configure-pod-disruption-budget.md

Added a redirects_from section to the new doc, containing the path
of the now-deleted doc, plus all the redirects from the deleted
doc.

* Expand PDB Concept guide

Building on a little content from the old task,
greatly expanded the Disruptions concept
guide, including an abstract example.

* Update creating a pdb Task.

* Address review comments.

* Fixed for all cody-clark's review comments

* Address review comments from mml

* Address review comments from maisem

* Fix missing backtick

* Api and Kubectl reference docs updates for 1.7 (#4193)

* Fix includes groups

* Generated kubectl docs for 1.7

* Generated references docs for 1.7 api

* Document node authorization mode

* API Aggregator (#4173)

* API Aggregator

* Additional bullet points

* incorporated feedback for apiserver-aggregation.md

* split setup-api-aggregator.md into two docs and address feedback

* fix link

* addressed docs feedback

* incorporate feedback

* integrate feedback

* Add documentation for DNS stub domains (#4063)

* Add documentation for DNS stub domains

* add additional prereq

* fix image path

* review feedback

* minor grammar and style nits

* documentation for using hostAliases to manage hosts file (#4080)

* documentation for using hostAliases to manage hosts file

* add to table of contents

* review comments

* update the right command to see hosts file

* reformat doc based on suggestion and change some wording

* Fix typo for #4080

* Patch PR #4063

* Fix wording in placement policy task introduction

* Add update to statefulset concepts and basic tutorial (#4174)

* Add update to statefulset concpets and basic tutorial

* Address tech comments.

* Update ESIPP docs for new added API fields

* Custom resource docs

* update audit document with advanced audit features added in 1.7

* kubeadm v1.7 documentation updates (#4018)

* v1.7 updates for kubeadm

* Address review comments

* Address Luke's comments

* Encrypting secrets at rest and cluster security guide

* Edits for Custom DNS Documentation (#4207)

* reorganize custom dns doc

* format fixes

* Update version numbers to 1.7

* Patch PR #4140 (#4215)

* Patch PR #4140

* fix link and typos

* Update PR template

* Update TLS bootstrapping with 1.7 features

This includes documenting the new CSR approver built into the
controller manager and the kubelet alpha features for certificate
rotation.

Since the CSR approver changed over the 1.7 release cycle we need
to call out the migration steps for those using the alpha feature.
This document as a whole could probably use some updates, but the
main focus of this PR is just to get these features minimally
documented before the release.

* Federated ClusterSelector

formatting updates from review

* complete PR #4181 (#4223)

* complete PR #4181

* fix security link

* Extensible admission controller (#4092)

* extensible-admission-controllers

* Update extensible-admission-controllers.md

* more on initializers

* fixes

* Expand external admission webhooks documentation

* wrap at 80 chars

* more

* add reference

* Use correct apigroup for network policy

* Docs changes to PR #4092 (#4224)

* Docs changes to PR #4092

* address feedback

* add doc for --as-group in cli

Add doc for this pr:
https://github.com/kubernetes/kubernetes/pull/43696
2017-06-29 22:39:40 -07:00
Christoph Blecker 2e192598a0 Update links to proper repos 2017-06-28 22:08:36 -07:00
Jamie Hannaford ddb6636f2c Document kubeadm KUBELET_DNS_ARGS issue 2017-06-26 09:00:20 -07:00
Jamie Hannaford 686b7aef38 Document how to use custom certs with kubeadm (#4113) 2017-06-25 11:44:44 -07:00
Selvi K 0b5ff11185 Typo in authentication.md 2017-06-23 00:49:31 -07:00
Murad Korejo bbffb34c6c Updates to docs/admin/kubelet-tls-bootstrapping (#3617)
* update TLS bootstrapping doc

* formatting edits on top of prev edits

* revert to lowercase b in title
2017-06-22 14:22:20 -07:00
Charlie R.C 4edbe7449d add PodNodeSelector to admission-controllers (#3691) 2017-06-22 14:19:28 -07:00
Charlie R.C 4ac5baaf51 Document the use of verb if set resourceNames
ref to https://github.com/kubernetes/kubernetes/blob/master/pkg/apis/rbac/helpers.go#L225
2017-06-22 13:29:30 -07:00
Jonathan MacMillan daca587c77 Fix a typo in the High Availability docs (#4048) 2017-06-20 15:19:04 -07:00
xilabao f527759087 add the introduce of using wildcard '*' in nonResourceURL 2017-06-20 13:17:05 -07:00
Jamie Hannaford 0ef468e48b Add notes for file/flag precedence 2017-06-19 16:53:02 -07:00
Harry Zhang ed00765f3c Add CRI runtime support 2017-06-07 10:05:06 -07:00
Cao Shufeng 8dd901ee98 [authorization] fix invalid href for webhook 2017-06-05 11:42:13 +08:00
Jordan Liggitt 2841f6dabe Improve RBAC doc (#3951)
* Remove spurious cluster-status role description

* Indicate controller-manager must be granted controller roles when not run with --use-service-account-credentials
2017-06-02 14:26:39 -07:00
Charlie R.C 75303cfee4 add prompt about KUBE_REPO_PREFIX (#3597)
* add prompt about KUBE_REPO_PREFIX

* add period
2017-05-31 10:45:55 -07:00
Tuna d905c3838f add unit of --ttl duration (#3915)
* add unit of --ttl duration

fix #3890

* fix typo
2017-05-30 11:41:16 -07:00
Karthik Gaekwad 2660141c20 Fixes broken links 2017-05-30 11:40:29 -07:00
Charlie R.C b545d393b6 update recommend admission control plug-ins 2017-05-23 22:28:36 -07:00
Andrew Chen 3c1b0df482 Reimplement #3770 2017-05-23 14:10:17 -07:00
Andrew Chen fcfc676786 Reimplement #3767 2017-05-23 13:56:57 -07:00
Jim Rollenhagen 1a1afdf162 Trivial typo fix
s/Carabou/Caribou/ in the API access docs.
2017-05-22 18:12:42 -04:00
Rick Sostheim 4bacc2419c trivial markdown changes to cleanup page rendering
inserted json body pretty printed for further clarity.
2017-05-22 13:38:59 -07:00
Steve Perry a02a577082 Remove and redirect: admin/cluster-trouble. (#3839) 2017-05-18 22:29:20 -07:00
Steve Perry 18ccf43021 Update link: user-guide/application-troubleshooting. (#3834) 2017-05-18 18:16:31 -07:00
Andrew Chen 6a7c312867 Update links in home, header, footer, whatisk8s (#3833)
* home page, header, footer

* docs/whatisk8s

* /docs/user-guide/compute-resources/

* /docs/concepts/overview/what-is-kubernetes.md
2017-05-18 16:50:06 -07:00
Jordan Liggitt 8d597e8e23 Clarify when RBAC reconciliation is active 2017-05-17 11:41:58 -07:00
Stephenie Swope 6baa409961 WriteTheDocs Update to the page (#3778)
* WriteTheDocs Update to the page 

Moved some detailed content from /docs/admin/accessing-the-api/ to this page. 
Moved ABAC mode info (with no changes) to https://kubernetes.io/docs/admin/authorization/abac/
Moved Webhook mode info (with no changes) to https://kubernetes.io/docs/admin/authorization/webhook/
Reorganized the page and tweaked the conceptual information.
Updated to match the page template here: https://kubernetes.io/docs/home/contribute/page-templates/

* Removed TOC

Removed TOC

* Update index.md

Fixed MD to add spaces between ## and the text
2017-05-15 17:13:33 -07:00
Stephenie Swope a882281a10 Update Authorization high-level overview
Stripped out details from the Authorization overview. Details to be updated and added to the Authorization page.
2017-05-15 16:43:46 -07:00
zhangmingld d0a395e83e The kubelet flag "--config" has changed to be "pod-manifest-path" (#3692)
The kubelet flag "--config" has changed to be "pod-manifest-path" ,so
file "default-kubelet"should be changed.
2017-05-10 13:36:07 -07:00
Charlie R.C 2aeffaefba fix typo in rbac.md 2017-05-10 09:28:06 -07:00
Ahmet Alp Balkan d3cc80f5e0 Fix broken link in HA doc with minikube (#3599)
Fixes #3570.

Signed-off-by: Ahmet Alp Balkan <ahmetb@google.com>
2017-05-02 12:33:20 -07:00
Charlie R.C 5e384ab531 remove abandoned environment variable 2017-04-28 15:43:17 -07:00
xilabao fcecf1b7ed fix impersonate in authorization 2017-04-28 15:21:31 -07:00
Eric Chiang 8b99043839 rbac: document resourceNames and note they can't be used for creates 2017-04-27 15:07:07 -07:00