Brandon Smith
af2f72ad59
Windows HostProcess Container Documentation ( #28413 )
...
* Rebasing HostProcess security changes.
* Incorporated initial round of feedback
* Minor wording updates
* Finished up remaining todo items
* Apply suggestions from code review
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Mark Rossetti <marosset@microsoft.com>
* Moved HostProcess security documentation into PSS and create-host-process-pod docs
* Updated with for James' review
* Apply suggestions from code review
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>
* Minor edits
* Modifications for additional feedback
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Mark Rossetti <marosset@microsoft.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>
2021-07-27 00:50:45 -07:00
Kubernetes Prow Robot
acc7252970
Merge pull request #29025 from robscott/endpoints-rbac
...
Adding documentation about Endpoints write access in wake of CVE-2021-25740
2021-07-26 23:20:45 -07:00
Jiawei Wang
ce8641227c
Fix csi migration feature gates
2021-07-26 13:14:25 -07:00
Kubernetes Prow Robot
6399fb6c75
Merge pull request #28858 from tengqm/kube-scheduler-config-v1beta2
...
Switch kube-scheduler config to v1beta2
2021-07-26 12:16:33 -07:00
Kubernetes Prow Robot
5a813f1267
Merge pull request #28430 from margocrawf/master
...
Add Impersonate-Uid description to Authentication docs page.
2021-07-26 12:02:33 -07:00
Rob Scott
d710925768
Adding documentation about Endpoints write access in wake of CVE-2021-25740
2021-07-26 11:32:06 -07:00
Kubernetes Prow Robot
54bebd3248
Merge pull request #28872 from tengqm/kubeadm-config-v1beta3
...
Readd kubeadm config v1beta3 reference for 1.22
2021-07-23 16:19:06 -07:00
Kubernetes Prow Robot
09e92f3d5f
Merge pull request #28566 from xiaoxubeii/dev-1.22
...
Support Memory QoS with cgroups v2 for 1.22 #2570
2021-07-22 23:59:16 -07:00
Qiming Teng
500745dd60
Add kubeadm config reference v1beta3
2021-07-23 13:10:55 +08:00
Kubernetes Prow Robot
9234f9454b
Merge pull request #28070 from enj/enj/f/duration_hint
...
Update CSR docs with expirationSeconds field details
2021-07-22 18:29:16 -07:00
Kubernetes Prow Robot
be5f25eade
Merge pull request #27891 from fromanirh/cpumanager-policy-options
...
cpumanager: document cpu manager policy options
2021-07-22 05:15:51 -07:00
Francesco Romani
2946586e77
Update content/en/docs/reference/command-line-tools-reference/kubelet.md
...
Co-authored-by: Danielle <dani@builds.terrible.systems>
2021-07-22 11:45:47 +02:00
Kubernetes Prow Robot
f92e3ec2ba
Merge pull request #28903 from sejr/feat/podsecurity
...
Add Pod Security Standards documentation
2021-07-22 01:57:52 -07:00
Monis Khan
f2b27507bd
Update CSR docs with expirationSeconds field details
...
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-21 16:59:02 -04:00
Monis Khan
9329467e6e
Complete details regarding CSR garbage collection
...
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-21 16:04:24 -04:00
Samuel Roth
e0d4b53b1c
incorporating initial round of feedback
2021-07-21 15:33:46 +00:00
Francesco Romani
a376a29d7e
cpumanager: document cpu manager static policy options
...
The enhancement https://github.com/kubernetes/enhancements/issues/2625
want to add a new kubelet option to fine tune the behaviour of the
cpu manager policies, and to do so we add support for cpu manager policy
options themselves.
Signed-off-by: Francesco Romani <fromani@redhat.com>
2021-07-21 16:25:19 +02:00
Kubernetes Prow Robot
2007c90673
Merge pull request #28869 from verult/fsgroup-to-csi
...
Documentation for delegating FSGroup change to CSI driver
2021-07-21 07:04:08 -07:00
Kubernetes Prow Robot
1a7b4a5e2f
Merge pull request #26664 from bart0sh/PR0004-multisize-hugepages-GA
...
Graduate multiple sizes huge pages to GA
2021-07-21 06:58:08 -07:00
Kubernetes Prow Robot
83f6cb6ed4
Merge pull request #28429 from ankeesler/exec-credential-v1
...
exec credential provider: v1 documentation
2021-07-21 06:54:07 -07:00
Kubernetes Prow Robot
793c66fffc
Merge pull request #28474 from SergeyKanzhelev/deprecateDynamicKubeletConfig
...
deprecation of DynamicKubeletConfig feature flag
2021-07-21 06:52:08 -07:00
Elana Hashman
429638be6a
Add swap memory to node documentation
2021-07-20 11:18:42 -07:00
Cheng Xing
ac68a21c9a
Documentation for delegating FSGroup change to CSI driver
2021-07-19 14:28:07 -07:00
Ed Bartosh
7a0f9bc01e
Graduate multiple sizes huge pages to GA
...
Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
2021-07-19 12:51:19 +03:00
xiaoxubeii
f21eaae616
Add feature gates description for MemoryQoS.
2021-07-17 10:36:25 +08:00
Aldo Culquicondor
a6b6a976c3
Add feature gate JobTrackingWithFinalizers
...
and describe its behavior
Signed-off-by: Aldo Culquicondor <acondor@google.com>
2021-07-15 10:03:13 -04:00
Andrew Keesler
a30e63dcd6
exec credential provider: v1 documentation
...
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-07-13 10:47:14 -04:00
Qiming Teng
e9730d3e95
Switch kube-scheduler config to v1beta2
2021-07-13 14:16:44 +08:00
Margo Crawford
d77368133a
Add Impersonate-Uid description to Authentication docs page.
...
This change goes with https://github.com/kubernetes/kubernetes/pull/99961
in the Kubernetes repo.
2021-07-12 13:17:42 -07:00
Kubernetes Prow Robot
a1fd3a2d57
Merge pull request #28839 from alculquicondor/scheduler_config
...
Update plugin names and deprecations for scheduler config
2021-07-12 11:09:42 -07:00
Christopher Negus
548ba073da
Merge main into dev-1.22 to keep in sync
2021-07-09 18:19:13 +00:00
Kubernetes Prow Robot
0606d22bae
Merge pull request #28878 from astraw99/patch-1
...
Fix pending CSR delete time is 24 hours
2021-07-09 09:02:53 -07:00
Kubernetes Prow Robot
e13a8fbba0
Merge pull request #28871 from tengqm/kubeadm-config-1.21
...
Update kubeadm config reference for 1.21
2021-07-09 07:50:53 -07:00
Aldo Culquicondor
a5c3c66fc9
Update plugin names and deprecations for scheduler config
...
Signed-off-by: Aldo Culquicondor <acondor@google.com>
2021-07-09 10:15:45 -04:00
AStraw
dd443f0238
Fix pending CSR deleted time is 24 hours
...
From the code, the `pendingExpiration = 24 * time.Hour`, so the pending CSR deleted time is 24 hours.
2021-07-09 16:49:54 +08:00
Kubernetes Prow Robot
2b97646e39
Merge pull request #28816 from haardikdharma10/list-ControllerManagerLeaderMigration-feature-gate
...
List ControllerManagerLeaderMigration feature gate in feature gates page
2021-07-08 19:26:53 -07:00
Qiming Teng
0696f6181a
Update kubeadm config reference for 1.21
...
The `v1beta3` version is a 1.22 thing, not 1.21 (main). This PR replaces the `v1beta3` version by `v1beta2`. A follow up PR will add the `v1beta3` to the `dev-1.22` branch.
2021-07-09 09:22:07 +08:00
Kubernetes Prow Robot
4c6a904242
Merge pull request #28360 from neolit123/1.22-add-v1beta3
...
kubeadm: use the new v1beta3 instead of v1beta2
2021-07-08 09:42:54 -07:00
Kubernetes Prow Robot
e10ad9024a
Merge pull request #28102 from damemi/log-scaledown-1.22
...
Update LogarithmicScaleDown featuregate docs
2021-07-08 08:04:54 -07:00
Kubernetes Prow Robot
fbc0bf209e
Merge pull request #28775 from tengqm/kubeadm-config
...
Add reference doc for kubeadm config
2021-07-08 01:30:53 -07:00
Sergey Kanzhelev
a4fbeb27dc
deprecation of DynamicKubeletConfig feature flag
2021-07-08 00:11:52 +00:00
Qiming Teng
2ba16150ec
Add reference doc for kubeadm config
...
This reference is auto-generated from the upstream source using the
reference-docs/genref tool.
2021-07-07 22:17:28 +08:00
Haardik Dharma
7e732774ca
Update feature-gates.md
2021-07-07 15:47:35 +05:30
Haardik Dharma
4222cb1b46
Update feature-gates.md
2021-07-07 03:55:24 +05:30
Lubomir I. Ivanov
3437d0185c
kubeadm/init-join.md: add note about using "skipPhases" from config
...
Since 1.22 it will be possible to skip phases using the configuration
file. Add note about that in the relevant sections of the kubeadm
init and join reference pages.
2021-07-06 22:51:54 +03:00
Hanlin Shi
25265cff5e
Update ServiceLBNodePortControl feature gate status
...
Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
2021-07-05 15:11:07 -07:00
Kubernetes Prow Robot
8b51854c67
Merge pull request #28644 from tengqm/update-feature-gates
...
Update feature gates for 1.22
2021-07-05 01:06:54 -07:00
Edward Huang
0c5a2e06da
Fixed up typo in extensible-admission-controllers.md
2021-07-05 11:41:11 +12:00
Kubernetes Prow Robot
db21e0a8da
Merge pull request #28443 from liuxu623/dev-1.22
...
fix kubelet flag description
2021-07-04 06:24:18 -07:00
Qiming Teng
372d34dc94
Update feature gates for 1.22
...
This PR updates the feature gate status based on upstream
implementation.
The chanegs are listed below with links to upstream PRs merged:
- BalanceAttacedNodeVolumes kubernetes/kubernetes#102443
- CSIMigrationvSphereComplete kubernetes/kubernetes#101272
- CSIServiceAccountToken kubernetes/kubernetes#103001
- DaemonSetUpdateSurge kubernetes/kubernetes#101742
- DisableCloudProviders kubernetes/kubernetes#100136
- IndexedJob kubernetes/kubernetes#101292
- LegacyNodeRoleBehavior kubernetes/kubernetes#100776
- NamespaceDefaultLabelName kubernetes/kubernetes#101342
- NetworkPolicyEndPort kubernetes/kubernetes#102834
- NodeDisruptionExclusion kubernetes/kubernetes#100776
- PodAffinityNamespaceSelector kubernetes/kubernetes#101496
- PodDeletionCost kubernetes/kubernetes#101080
- PreferNominatedNode kubernetes/kubernetes#102201
- ServiceLoadBalancerClass kubernetes/kubernetes#103129
- ServiceNodeExclusion kubernetes/kubernetes#100776
- ServiceTopology kubernetes/kubernetes#102412
- SizeMemoryBackedVoluems kubernetes/kubernetes#101048
- StatefulSetMinReadySeconds kubernetes/kubernetes#100842
- SuspendJob kubernetes/kubernetes#102022
- WindowsHostProcessContainers kubernetes/kubernetes#99576
2021-07-02 18:20:10 +08:00