Commit Graph

457 Commits

Author SHA1 Message Date
Richard Tweed 68b19b6f00 Specify that subresources excluded from mutating webhook example 2023-02-06 22:33:00 +00:00
Kubernetes Prow Robot c809bcc796
Merge pull request #39180 from Zhuzhenghao/certificate-signing-requests
Make layout prettier in certificate-signing-requests.md
2023-01-30 22:14:48 -08:00
zhuzhenghao 80561f67b1 Make layout prettier in certificate-signing-requests.md 2023-01-31 13:45:44 +08:00
windsonsea 4164430555 Add spaces in code snippets for consistency 2023-01-30 18:15:06 +08:00
mtardy 6c701a7d96 Update doc of admission plugin SecurityContextDeny
Note the shortcomings of the implementation of this admission plugin

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Qiming Teng <tengqm@outlook.com>
2023-01-29 17:27:12 +01:00
Mathieu Benoit 4ec6fbac55
Fix errors on `ValidatingAdmissionPolicyBindings` for the CEL for Admission Control blog & doc (#38893)
* Fix errors on ValidatingAdmissionPolicyBindings for the CEL for Admission Control blog

* Fix namespaceSelector error

* Fix namespaceSelector errors
2023-01-12 08:38:54 -08:00
Kubernetes Prow Robot e97c98b27f
Merge pull request #38428 from AverageMarcus/patch-1
Fix typo in SA admission controller steps
2023-01-03 17:19:58 -08:00
Qiming Teng 37955a816b Reformat the validating-admission-policy reference page
This commit wraps the long lines found in the
validating-admission-policy reference page.
2022-12-31 07:44:49 +08:00
Qiming Teng 3362aa9701 Add admission.k8s.io/v1 API and fix references to it
The `admission.k8s.io/v1` API group is not generated into the v2/v3 OpenAPI
specification as part of Kubernetes API because it is not officially "served".
However, the structs in the API group are used in other APIs that are user-facing.
This PR addes the reference API and fixes references to it.
2022-12-31 07:44:41 +08:00
Saloni1814 912c306be4
Fixing Spec -> spec and paramsRef -> paramRef
Fixing Spec -> spec and paramsRef -> paramRef
2022-12-23 18:25:22 +05:30
Yash Pimple b590431f4e
Updated the wrong format 2022-12-20 01:24:49 +05:30
Kubernetes Prow Robot f1405f274a
Merge pull request #38497 from samos123/fix-38495-validation-admission-policy
Fix 38495 incorrect ValidationAdmissionPolicyBindings
2022-12-16 20:51:41 -08:00
Kubernetes Prow Robot f9e113fb86
Merge pull request #38353 from SergeyKanzhelev/RotateKubeletClientCertificateIsGA
fix documentation for RotateKubeletClientCertificate
2022-12-16 07:18:17 -08:00
Sam Stoelinga 088649ec4f Fix incorrect ValidationAdmissionPolicyBindings 2022-12-15 10:00:55 -08:00
Marcus Noble 2b5dab08f1
Fix typo in SA admission controller steps 2022-12-12 15:11:43 +00:00
Sergey Kanzhelev ab4812140f fix documentation for RotateKubeletClientCertificate 2022-12-09 18:24:04 +00:00
Tim Bannister 8f9446f87d
Merge branch 'main' into dev-1.26 2022-12-03 21:36:34 +00:00
Kubernetes Prow Robot 50246c291b
Merge pull request #37770 from cici37/celDoc
Documentation for CEL in Admission Control
2022-12-01 16:33:53 -08:00
Cici Huang 98d41f24ef Address comments 2022-11-30 16:47:27 +00:00
Cici Huang 4dc90ef731 Add doc for ValidatingAdmissionPolicy 2022-11-30 06:35:18 +00:00
Kubernetes Prow Robot cec61c1754
Merge pull request #38052 from krol3/merged-main-dev-1.26
Merge main branch into dev-1.26
2022-11-29 11:59:09 -08:00
Kubernetes Prow Robot 9b4b8831ca
Merge pull request #38010 from Shubham82/Add_shell
Append triple backticks with shell for code snippet
2022-11-28 19:37:22 -08:00
Kubernetes Prow Robot f306471950
Merge pull request #35385 from nabokihms/patch-2
Add doc about how to get self subject attributes
2022-11-28 00:58:07 -08:00
Maksim Nabokikh cb9dc5a4ac Update content/en/docs/reference/access-authn-authz/authentication.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2022-11-27 22:31:16 +01:00
Sergey Shevchenko 35c3321b02
feat: Add caution note about rules field override in aggregated clusterroles 2022-11-25 16:24:13 +02:00
Shubham Kuchhal e100cf80c4 Added shell for code snippet. 2022-11-25 16:56:50 +05:30
Shubham Kuchhal 707d3699ad Append triple backticks with shell for code snippet 2022-11-22 13:37:49 +05:30
Michael 63008ca41a Fix indentation and typos in kubelet-tls-bootstrapping.md 2022-11-21 07:40:54 +08:00
Michael ed983897ff Fix typos in /service-accounts-admin.md 2022-11-11 20:38:13 +08:00
Maksim Nabokikh 5d61921a11 Apply suggestions from code review
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2022-11-10 12:53:21 +01:00
Maksim Nabokikh 0a5e274a42 Add doc about how to get self subject attributes
Documentation for https://github.com/kubernetes/enhancements/issues/3325
2022-11-10 12:52:53 +01:00
Kubernetes Prow Robot f3248058fd
Merge pull request #33654 from sftim/20190601_task_configure_service_account_reword
Reword tasks relating to ServiceAccounts
2022-11-09 13:50:56 -08:00
Kubernetes Prow Robot 6a3598661d
Merge pull request #37734 from sftim/20221105_tweak_admission_controllers_reference
Tweak reference for admission controllers
2022-11-06 02:02:15 -08:00
Tim Bannister f348002c26
Tweak reference for admission controllers
- Improve page title
- Update page to match style guide
- Wording and correctness tweaks
2022-11-06 08:14:58 +00:00
Abigail McCarthy 98f310ab58 Updates page weights in reference docs section
Some of these pages are autogenerated, but not all. This PR updates the pages that are not autogenerated within the docs/en/reference section
2022-11-04 11:37:59 -04:00
Abigail McCarthy f24c201017 Update content/en/docs/reference/access-authn-authz 2022-10-24 13:47:22 -04:00
Tim Bannister a4629cd19b
Update ServiceAccount tasks in light of TokenRequest
Now that TokenRequest is the default way to get a service account token
for a Pod, update the task pages that relate to this.
2022-10-22 02:56:43 +01:00
Tim Bannister f9db6ae934
Reword “Managing Service Accounts” task 2022-10-22 02:56:42 +01:00
Kubernetes Prow Robot bed6565a22
Merge pull request #37363 from T-Lakshmi/add-link-RFC7468
Added Hyperlink to RFC7468
2022-10-20 08:15:02 -07:00
lakshmi prasuna 4e6140bf04 Added Hyperlink to RFC7468 2022-10-18 17:06:55 +05:30
Tim Bannister 1eef742465
Favor EndpointSlice over Endpoints
Document EndpointSlice as the preferred and most appropriate mechanism
to record the backing endpoints of a Service.

Co-authored-by: Rob Scott <rob.scott87@gmail.com>
Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
2022-10-11 12:38:39 +01:00
Kubernetes Prow Robot d772e76af9
Merge pull request #36709 from gaeljw/patch-1
docs: update OIDC documentation to mention the signing algorithms configuration
2022-09-30 06:58:29 -07:00
houjun 523b0f89b4 Fix the feature state of PodSecurity 2022-09-19 09:00:29 +08:00
Kubernetes Prow Robot ce1dbcbdfa
Merge pull request #36538 from gengwg/main
kube-proxy is part of the Kubernetes node components
2022-09-14 09:41:00 -07:00
Kubernetes Prow Robot d057687f6f
Merge pull request #36660 from liggitt/scrape-secrets
Update service account token documentation
2022-09-10 16:31:23 -07:00
Gaël Jourdan-Weil 699ed970ae
docs: update OIDC documentation to mention the signing algorithms configuration 2022-09-09 17:34:17 +02:00
Jordan Liggitt 79f26d5922
Update service account token documentation
* Make example service account output match 1.24+ output with auto-generated tokens omitted
* Prefer `kubectl create token` as token creation mechanism
2022-09-07 16:00:27 -04:00
Kubernetes Prow Robot e8b9538785
Merge pull request #36043 from tomkivlin/tomkivlin/issue28580
Mention wildcard for RBAC resources and names
2022-09-07 09:24:37 -07:00
W Geng 3de5a3768b
kube-proxy is part of the Kubernetes node components
kube-proxy is part of the Kubernetes node components not control plane. I think it's a typo.
ref: https://kubernetes.io/docs/concepts/overview/components/#node-components
2022-09-02 11:53:57 -07:00
whitebear009 9acf28fce9 fix note typo 2022-08-31 17:58:31 +08:00