Commit Graph

152 Commits

Author SHA1 Message Date
Kubernetes Prow Robot a5e96bfbc5
Merge pull request #33992 from mtardy/security-checklist
Add a security checklist for clusters
2022-09-01 13:13:19 -07:00
mtardy 9f5a35978f RBAC guide is presented as a checklist item 2022-09-01 11:44:55 +02:00
mtardy eb962b4c12 Rewrite the part on the Pod Security standards and admission 2022-09-01 11:43:28 +02:00
Mahé a4305381fb
Reword the service mesh suggestion 2022-08-31 18:29:59 +02:00
Mahé d4fcf2fc7c
Reword the secret injection suggestion 2022-08-31 18:29:43 +02:00
mtardy f14a7544e5 Rewrite the admission plugins list 2022-08-31 18:26:49 +02:00
mtardy 239dc4c2fe Fix a typo on the word securely 2022-08-31 17:54:20 +02:00
mtardy c006a43f97 Replace a wrong unicode space character 2022-08-31 17:51:51 +02:00
mtardy 63ae0a9521 Split checklist item and explanation 2022-08-31 17:38:42 +02:00
mtardy d40e9cfa89 Remove an empty line 2022-08-31 17:37:01 +02:00
Mahé 2f8388e830
Add precision about pod security with pod security standards
Co-authored-by: Rey Lejano <rlejano@gmail.com>
2022-08-31 17:35:03 +02:00
mtardy 0e81bfd8ef Detail and add info on the CPU and memory limit item 2022-08-31 17:32:00 +02:00
mtardy 7139aba954 Add some guidelines on how to read the doc 2022-08-31 17:17:56 +02:00
Mahé 949e499db3
Rewrite the checklist item on minimal container images 2022-08-31 16:55:31 +02:00
Mahé 5167ab5c88
Use correct name for PodSecurityPolicy admission controller 2022-08-31 16:55:05 +02:00
Mahé 777d396905
Remove warning on PodSecurityPolicy removal in 1.25 2022-08-31 16:54:30 +02:00
Kubernetes Prow Robot 56e78c2011
Merge pull request #34920 from mk46/en_crlftolf
Convert CRLF to LF
2022-08-24 14:15:50 -07:00
Kubernetes Prow Robot 28b1854383
Merge pull request #36198 from davidmlentz/patch-2
Fix typo
2022-08-23 21:57:48 -07:00
David M. Lentz 603f810903
Fix typo
There are redundant instances of "future" in this sentence.
2022-08-23 14:43:41 -06:00
Kubernetes Prow Robot c4a36a8067
Merge pull request #36165 from cathchu/merged-main-dev-1.25
Merged main branch into dev-1.25
2022-08-22 15:12:09 -07:00
cathchu e5ea8833be Merge remote-tracking branch 'upstream/main' into dev-1.25 2022-08-22 08:35:18 -04:00
Stanislav Kardashov a3064b1a36
[en] typo fix "privilge -> privilege" 2022-08-19 16:37:47 +03:00
ravisantoshgudimetla a1f6615206 Update pod security standards to use PodOS field 2022-08-18 15:47:41 -04:00
Jordan Liggitt b167938367 Scrub PSP docs for 1.25 2022-08-15 21:09:41 -04:00
Kubernetes Prow Robot 1476ac9203
Merge pull request #35618 from tallclair/psa-stable-1.25
Update Pod Security Admission docs for graduation to stable
2022-08-14 12:34:13 -07:00
mtardy b3a7965e3e Add the security checklist guide
From the collaborative document with Savitha, Skybound and p4ck3t0,
after many edits thanks to the collaborators on the PR.

Co-authored-by: rschosser <88308339+rschosser@users.noreply.github.com>
Co-authored-by: Cailyn <cailyn.s.e@gmail.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Rey Lejano <rlejano@gmail.com>
Co-authored-by: Benjamin Koltermann <48812495+p4ck3t0@users.noreply.github.com>
Co-authored-by: Skybound1 <github@skybound.link>
Co-authored-by: divya-mohan0209 <divya.mohan0209@gmail.com>
2022-08-12 11:22:14 +02:00
Tim Allclair 29d9fa5a5f Remove prerequisites 2022-08-05 14:39:39 -07:00
Manish Kumar a96eb1118f Convert CRLF to LF 2022-08-04 11:05:16 +05:30
Tim Allclair ce898c50be Update Pod Security Admission docs for graduation to stable 2022-08-01 16:57:21 -07:00
Stanislav Kardashov 4e5cc42fc9
fix typo -> remove extra word "in" 2022-08-01 22:59:46 +03:00
Paszymaja 30eb2cc0cf
Update content/en/docs/concepts/security/rbac-good-practices.md
Co-authored-by: divya-mohan0209 <divya.mohan0209@gmail.com>
2022-07-27 14:12:15 +02:00
Paszymaja 7deb7e78cd
Merge branch 'main' into patch-1 2022-07-27 14:00:51 +02:00
Kubernetes Prow Robot 54d2e71509
Merge pull request #34675 from mtardy/psp-annotation
Document the deprecated kubernetes.io/psp annotation
2022-07-25 02:26:35 -07:00
Kubernetes Prow Robot e39409e0ee
Merge pull request #34098 from Nirusu/patch-1
Remove section about the localhost port
2022-07-11 01:23:49 -07:00
Kubernetes Prow Robot 94c832e49f
Merge pull request #34380 from tengqm/fix-links-3
Batch fix links (3)
2022-07-10 18:27:48 -07:00
Nils Hanke 959cb92224 Integrate flags into "Transport security" section 2022-07-09 04:55:43 -07:00
Qiming Teng d705d9ed1c Batch fix links (3) 2022-07-09 09:14:06 +08:00
Abhishek Patra ade7ed2e36
Fix minor typo 2022-07-06 19:57:58 +05:30
Sean Wei 34721abcac Use relative links for k8s.io 2022-06-30 12:08:14 +08:00
mtardy 1d55061a5a Remove the part about defining a PSP in a file 2022-06-29 09:37:23 +02:00
mtardy 8a4e62fb76 Separate commands from their outputs 2022-06-29 09:36:11 +02:00
Mahé 3b8a2a01fa
Clarify the reference to the psp annotation in the concept page
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2022-06-29 09:26:06 +02:00
mtardy 9ffd24b78d Use absolute URL in the tuto for the example PSP 2022-06-28 21:20:08 +02:00
mtardy 453f4e61f6 Reference the kubernetes.io/psp annotation on the PodSecurityPolicy concept page 2022-06-28 21:17:10 +02:00
Kubernetes Prow Robot 5c19702944
Merge pull request #33934 from JimBugwadia/multi-tenancy
multi-tenancy section for docs
2022-06-23 14:31:20 -07:00
Jim Bugwadia d71951bdf9 squash review updates
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2022-06-23 13:50:56 -07:00
mtardy d2b92602b3 Fix minor missing spaces typos in Pod Security Admission doc 2022-06-23 12:19:46 +02:00
Shubham 9ae05ea5b3
Improvement: Clarifiy the release which include Pod Security admission by default. (#34300)
* Improvement: Clarifiy the release which include Pod Security admission by default.

* Modify: wrapped the long lines.
2022-06-22 08:35:43 -07:00
Jihoon Seo e7caadc564 Replace skew shortcode parameters 2022-06-17 16:17:01 +09:00
Mark Rossetti c61be7d79c
Update pod-security-standards-hostprocess-state (#34264)
* Update pod-security-standards-hostprocess-state

Signed-off-by: Mark Rossetti <marosset@microsoft.com>

* using hugo short-code
2022-06-16 11:08:48 -07:00