Commit Graph

1405 Commits

Author SHA1 Message Date
Brandon Smith af2f72ad59
Windows HostProcess Container Documentation (#28413)
* Rebasing HostProcess security changes.

* Incorporated initial round of feedback

* Minor wording updates

* Finished up remaining todo items

* Apply suggestions from code review

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Mark Rossetti <marosset@microsoft.com>

* Moved HostProcess security documentation into PSS and create-host-process-pod docs

* Updated with for James' review

* Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>

* Minor edits

* Modifications for additional feedback

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Mark Rossetti <marosset@microsoft.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>
2021-07-27 00:50:45 -07:00
Kubernetes Prow Robot acc7252970
Merge pull request #29025 from robscott/endpoints-rbac
Adding documentation about Endpoints write access in wake of CVE-2021-25740
2021-07-26 23:20:45 -07:00
Jiawei Wang ce8641227c Fix csi migration feature gates 2021-07-26 13:14:25 -07:00
Kubernetes Prow Robot 6399fb6c75
Merge pull request #28858 from tengqm/kube-scheduler-config-v1beta2
Switch kube-scheduler config to v1beta2
2021-07-26 12:16:33 -07:00
Kubernetes Prow Robot 5a813f1267
Merge pull request #28430 from margocrawf/master
Add Impersonate-Uid description to Authentication docs page.
2021-07-26 12:02:33 -07:00
Rob Scott d710925768
Adding documentation about Endpoints write access in wake of CVE-2021-25740 2021-07-26 11:32:06 -07:00
Kubernetes Prow Robot 54bebd3248
Merge pull request #28872 from tengqm/kubeadm-config-v1beta3
Readd kubeadm config v1beta3 reference for 1.22
2021-07-23 16:19:06 -07:00
Kubernetes Prow Robot 09e92f3d5f
Merge pull request #28566 from xiaoxubeii/dev-1.22
Support Memory QoS with cgroups v2 for 1.22 #2570
2021-07-22 23:59:16 -07:00
Qiming Teng 500745dd60 Add kubeadm config reference v1beta3 2021-07-23 13:10:55 +08:00
Kubernetes Prow Robot 9234f9454b
Merge pull request #28070 from enj/enj/f/duration_hint
Update CSR docs with expirationSeconds field details
2021-07-22 18:29:16 -07:00
Kubernetes Prow Robot be5f25eade
Merge pull request #27891 from fromanirh/cpumanager-policy-options
cpumanager: document cpu manager policy options
2021-07-22 05:15:51 -07:00
Francesco Romani 2946586e77
Update content/en/docs/reference/command-line-tools-reference/kubelet.md
Co-authored-by: Danielle <dani@builds.terrible.systems>
2021-07-22 11:45:47 +02:00
Kubernetes Prow Robot f92e3ec2ba
Merge pull request #28903 from sejr/feat/podsecurity
Add Pod Security Standards documentation
2021-07-22 01:57:52 -07:00
Monis Khan f2b27507bd
Update CSR docs with expirationSeconds field details
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-21 16:59:02 -04:00
Monis Khan 9329467e6e
Complete details regarding CSR garbage collection
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-21 16:04:24 -04:00
Samuel Roth e0d4b53b1c incorporating initial round of feedback 2021-07-21 15:33:46 +00:00
Francesco Romani a376a29d7e cpumanager: document cpu manager static policy options
The enhancement https://github.com/kubernetes/enhancements/issues/2625
want to add a new kubelet option to fine tune the behaviour of the
cpu manager policies, and to do so we add support for cpu manager policy
options themselves.

Signed-off-by: Francesco Romani <fromani@redhat.com>
2021-07-21 16:25:19 +02:00
Kubernetes Prow Robot 2007c90673
Merge pull request #28869 from verult/fsgroup-to-csi
Documentation for delegating FSGroup change to CSI driver
2021-07-21 07:04:08 -07:00
Kubernetes Prow Robot 1a7b4a5e2f
Merge pull request #26664 from bart0sh/PR0004-multisize-hugepages-GA
Graduate multiple sizes huge pages to GA
2021-07-21 06:58:08 -07:00
Kubernetes Prow Robot 83f6cb6ed4
Merge pull request #28429 from ankeesler/exec-credential-v1
exec credential provider: v1 documentation
2021-07-21 06:54:07 -07:00
Kubernetes Prow Robot 793c66fffc
Merge pull request #28474 from SergeyKanzhelev/deprecateDynamicKubeletConfig
deprecation of DynamicKubeletConfig feature flag
2021-07-21 06:52:08 -07:00
Elana Hashman 429638be6a
Add swap memory to node documentation 2021-07-20 11:18:42 -07:00
Cheng Xing ac68a21c9a Documentation for delegating FSGroup change to CSI driver 2021-07-19 14:28:07 -07:00
Ed Bartosh 7a0f9bc01e Graduate multiple sizes huge pages to GA
Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
2021-07-19 12:51:19 +03:00
xiaoxubeii f21eaae616 Add feature gates description for MemoryQoS. 2021-07-17 10:36:25 +08:00
Aldo Culquicondor a6b6a976c3 Add feature gate JobTrackingWithFinalizers
and describe its behavior

Signed-off-by: Aldo Culquicondor <acondor@google.com>
2021-07-15 10:03:13 -04:00
Andrew Keesler a30e63dcd6
exec credential provider: v1 documentation
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-07-13 10:47:14 -04:00
Qiming Teng e9730d3e95 Switch kube-scheduler config to v1beta2 2021-07-13 14:16:44 +08:00
Margo Crawford d77368133a Add Impersonate-Uid description to Authentication docs page.
This change goes with https://github.com/kubernetes/kubernetes/pull/99961
in the Kubernetes repo.
2021-07-12 13:17:42 -07:00
Kubernetes Prow Robot a1fd3a2d57
Merge pull request #28839 from alculquicondor/scheduler_config
Update plugin names and deprecations for scheduler config
2021-07-12 11:09:42 -07:00
Christopher Negus 548ba073da Merge main into dev-1.22 to keep in sync 2021-07-09 18:19:13 +00:00
Kubernetes Prow Robot 0606d22bae
Merge pull request #28878 from astraw99/patch-1
Fix pending CSR delete time is 24 hours
2021-07-09 09:02:53 -07:00
Kubernetes Prow Robot e13a8fbba0
Merge pull request #28871 from tengqm/kubeadm-config-1.21
Update kubeadm config reference for 1.21
2021-07-09 07:50:53 -07:00
Aldo Culquicondor a5c3c66fc9 Update plugin names and deprecations for scheduler config
Signed-off-by: Aldo Culquicondor <acondor@google.com>
2021-07-09 10:15:45 -04:00
AStraw dd443f0238
Fix pending CSR deleted time is 24 hours
From the code, the `pendingExpiration  = 24 * time.Hour`, so the pending CSR deleted time is 24 hours.
2021-07-09 16:49:54 +08:00
Kubernetes Prow Robot 2b97646e39
Merge pull request #28816 from haardikdharma10/list-ControllerManagerLeaderMigration-feature-gate
List ControllerManagerLeaderMigration feature gate in feature gates page
2021-07-08 19:26:53 -07:00
Qiming Teng 0696f6181a Update kubeadm config reference for 1.21
The `v1beta3` version is a 1.22 thing, not 1.21 (main). This PR replaces the `v1beta3` version by `v1beta2`. A follow up PR will add the `v1beta3` to the `dev-1.22` branch.
2021-07-09 09:22:07 +08:00
Kubernetes Prow Robot 4c6a904242
Merge pull request #28360 from neolit123/1.22-add-v1beta3
kubeadm: use the new v1beta3 instead of v1beta2
2021-07-08 09:42:54 -07:00
Kubernetes Prow Robot e10ad9024a
Merge pull request #28102 from damemi/log-scaledown-1.22
Update LogarithmicScaleDown featuregate docs
2021-07-08 08:04:54 -07:00
Kubernetes Prow Robot fbc0bf209e
Merge pull request #28775 from tengqm/kubeadm-config
Add reference doc for kubeadm config
2021-07-08 01:30:53 -07:00
Sergey Kanzhelev a4fbeb27dc deprecation of DynamicKubeletConfig feature flag 2021-07-08 00:11:52 +00:00
Qiming Teng 2ba16150ec Add reference doc for kubeadm config
This reference is auto-generated from the upstream source using the
reference-docs/genref tool.
2021-07-07 22:17:28 +08:00
Haardik Dharma 7e732774ca Update feature-gates.md 2021-07-07 15:47:35 +05:30
Haardik Dharma 4222cb1b46 Update feature-gates.md 2021-07-07 03:55:24 +05:30
Lubomir I. Ivanov 3437d0185c kubeadm/init-join.md: add note about using "skipPhases" from config
Since 1.22 it will be possible to skip phases using the configuration
file. Add note about that in the relevant sections of the kubeadm
init and join reference pages.
2021-07-06 22:51:54 +03:00
Hanlin Shi 25265cff5e Update ServiceLBNodePortControl feature gate status
Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
2021-07-05 15:11:07 -07:00
Kubernetes Prow Robot 8b51854c67
Merge pull request #28644 from tengqm/update-feature-gates
Update feature gates for 1.22
2021-07-05 01:06:54 -07:00
Edward Huang 0c5a2e06da Fixed up typo in extensible-admission-controllers.md 2021-07-05 11:41:11 +12:00
Kubernetes Prow Robot db21e0a8da
Merge pull request #28443 from liuxu623/dev-1.22
fix kubelet flag description
2021-07-04 06:24:18 -07:00
Qiming Teng 372d34dc94 Update feature gates for 1.22
This PR updates the feature gate status based on upstream
implementation.

The chanegs are listed below with links to upstream PRs merged:

- BalanceAttacedNodeVolumes  kubernetes/kubernetes#102443
- CSIMigrationvSphereComplete kubernetes/kubernetes#101272
- CSIServiceAccountToken kubernetes/kubernetes#103001
- DaemonSetUpdateSurge kubernetes/kubernetes#101742
- DisableCloudProviders kubernetes/kubernetes#100136
- IndexedJob kubernetes/kubernetes#101292
- LegacyNodeRoleBehavior    kubernetes/kubernetes#100776
- NamespaceDefaultLabelName kubernetes/kubernetes#101342
- NetworkPolicyEndPort   kubernetes/kubernetes#102834
- NodeDisruptionExclusion   kubernetes/kubernetes#100776
- PodAffinityNamespaceSelector  kubernetes/kubernetes#101496
- PodDeletionCost  kubernetes/kubernetes#101080
- PreferNominatedNode kubernetes/kubernetes#102201
- ServiceLoadBalancerClass  kubernetes/kubernetes#103129
- ServiceNodeExclusion  kubernetes/kubernetes#100776
- ServiceTopology kubernetes/kubernetes#102412
- SizeMemoryBackedVoluems kubernetes/kubernetes#101048
- StatefulSetMinReadySeconds kubernetes/kubernetes#100842
- SuspendJob kubernetes/kubernetes#102022
- WindowsHostProcessContainers  kubernetes/kubernetes#99576
2021-07-02 18:20:10 +08:00