Commit Graph

327 Commits

Author SHA1 Message Date
Cao Shufeng 68f8244507 Add details about loopback cni plugin
This change provide a href to users, so that users knowns where to
download this loopback cin plugin. And a more accurate link about
cni configuration file is provided.
2016-11-01 05:57:43 -04:00
Dominic001 f6f0da2f9a more generic patch
use kubectl exec command so we dont have to worry about container type
2016-10-29 01:48:34 +02:00
Dominic001 f83b95234a more explicit etcdctl description
assuming that kubernetes is almost always used with docker. In case other container solutions as lxc are integrated this section
will need further revision. Just using the bare etcl command is a bit too less, at least there should be a hint that you log in into the container.
2016-10-28 22:49:17 +02:00
Zihong Zheng b72518e69c Add troubleshooting section to kube-dns readme 2016-10-28 09:39:32 -07:00
Casey Davenport 4ba092ae12 Update Calico add-on link 2016-10-28 08:46:27 -07:00
Maciej Szulik 541ca2c426 Small corrections how to curl eviction endpoint 2016-10-28 11:47:29 +02:00
Maciej Szulik b506e647f3 Updated imported docs with ./update-imported-docs.sh 2016-10-28 11:28:17 +02:00
Bryan Boreham 3f8d2817ce Merge branch 'master' into kubenet-note 2016-10-25 10:26:30 +01:00
Chris Marino 08d1ecd1df Kubeadm consistency 2016-10-24 16:25:58 -07:00
Chris Marino 0bfafbf6a8 Markdown error... 2016-10-24 16:22:55 -07:00
Chris Marino 2232e063aa Edits for consistency..
Kubeadmin, etc.
2016-10-24 16:00:28 -07:00
chrismarino 677699245e Merge branch 'master' into master 2016-10-24 10:01:27 -07:00
Joe Beda 71de608f4d Document kubeadm evn variables 2016-10-24 09:41:39 -07:00
Joe Beda e21ed27c58 Document kubeadm automation. 2016-10-24 09:41:39 -07:00
chrismarino b62a718bca Merge branch 'master' into master 2016-10-24 09:27:22 -07:00
Chris Marino 59d40b3e81 Merge remote-tracking branch 'refs/remotes/kubernetes/master' 2016-10-24 08:23:03 -07:00
Chris Marino 56a8e8bafc Minor content re-org, edits 2016-10-24 08:22:02 -07:00
Devan Goodwin 4fd44b1604 Document kubeadm --skip-preflight-checks. 2016-10-24 11:50:34 -03:00
Bryan Boreham f5ca6fae32 Update documentation about CNI flags and requirements (#1516)
* Update CNI kubelet option names

* Expand the minimum CNI requirements
2016-10-21 19:19:06 -07:00
Chris Marino d8688fa817 Add Romana to docs
ToC, and kubeadm page
2016-10-21 13:32:29 -07:00
Seth Jennings 98a4b521fd AUTOSCALER not AUTOSCALING 2016-10-20 10:46:51 -05:00
Bryan Boreham 4f0d6c1609 Adjust wording per review comments 2016-10-20 09:48:17 +01:00
Feynman Liang 8cab01acfa Merge branch 'master' into patch-1 2016-10-17 20:02:35 -07:00
devin-donnelly 7598df1a94 Merge pull request #1425 from bobbytables/patch-1
Fix code fencing for DNS validation example
2016-10-17 16:37:34 -07:00
Feynman Liang 1480754235 Correct typo in authorization header 2016-10-17 15:58:45 -07:00
devin-donnelly 20028937ab Merge pull request #1454 from pabloguerrero/patch-3
Update index.md
2016-10-17 14:53:13 -07:00
Kami Gerami 3ef9c7e526 34613 404 Not Found on links referring to /docs/user-guide/kubectl/kubectl/
Changed all links referring to kubectl from /docs/user-guide/kubectl/kubectl/ to /docs/user-guide/kubectl/
2016-10-16 13:39:43 +02:00
Pablo Guerrero 8f41a65a40 Update index.md 2016-10-13 14:43:48 +02:00
Lucas Käldström 23d7719663 Move kubeadm reference, add a navigation link to it and assignees 2016-10-11 09:01:12 +03:00
Robert Ross ced57785df Fix code fencing for DNS validation example 2016-10-10 19:39:14 -04:00
devin-donnelly 99e12c694a Merge pull request #1303 from MikeSpreitzer/updoc1
Clarified remark about authorizers determining groups
2016-10-10 15:39:58 -07:00
Mike Spreitzer 12f5e30309 Removed confusing remark about authorizers determining groups
The old text said that the authorizer is expected to determine group
memberships when the authenticator does not.  This not true.  It is
allowed, but not expected --- and none of the standard authorizers do
it.  I tried composing a brief correct statement about this, but the
reviews were mainly aghast that internal details of some non-standard
authorizers were being injected into the discussion of authentictors.
I decided that the better part of valor is simply to delete the whole
topic from here.  Besides, it is a conclusion that any reader would
normally draw --- since there is no statement forbidding it (nor
indeed any indication that there might be a reason to forbid it), any
reader would naturally conclude that an authorizer is free to derive
additional intermediate information of any sort and in any way it
likes.
2016-10-09 15:28:31 -04:00
Mike Spreitzer 30a8b4724f Clarified the apiGroup identified by empty string
Noted this where the relevance of api group is introduced, and
corrected the reference to what the empty string means ("core" api
group, which is the terminology used in the page that introduces api
group, rather than the old text "default").
2016-10-06 21:31:46 -07:00
devin-donnelly 35e25311b5 Merge pull request #1144 from adieu/format
Some small style tweaks to make pandoc working
2016-10-05 15:44:26 -07:00
devin-donnelly 49c83f4d12 Merge pull request #1251 from philips/add-details-from-dns-docs
admin: dns: merge from the build dir
2016-10-05 15:06:29 -07:00
devin-donnelly 6d5580590a Merge pull request #1332 from InQuicker/client-cert-groups
Explain how to define group memberships with client cert authentication.
2016-10-05 14:24:53 -07:00
devin-donnelly 15ada05bb7 Merge pull request #1333 from InQuicker/rbac-subresource
Document subresources in RBAC.
2016-10-05 14:19:58 -07:00
Jordan Liggitt 19e61ec1d6
Describe anonymous access, system:authenticated group 2016-10-05 13:11:37 -04:00
Mike Spreitzer 49c0ed7680 Merge branch 'master' into updoc3 2016-09-30 23:05:47 -04:00
Tim St. Clair 5eff46b035
Fix links to AppArmor policy references 2016-09-30 11:13:07 -07:00
Brandon Philips 8aa10a6fda admin: dns: merge from the build dir
Try and clean this mess up where the build dir has user facing docs and move them here.

Ref: https://github.com/kubernetes/kubernetes/pull/32931
2016-09-28 15:40:53 -07:00
Bryan Boreham c8abb1c5f8 Clarify what kubenet does and does not do 2016-09-28 16:58:31 +01:00
Jimmy Cuadra 19e65e224a Document subresources in RBAC. 2016-09-27 21:30:08 -07:00
Jimmy Cuadra 777e234970 Explain how to define group memberships with client cert authentication. 2016-09-27 17:43:34 -07:00
Mike Spreitzer fa44441f68 Noted HTTP syntax restriction on bearer tokens
Noted that every bearer token, in any of the four authentication
strategies that use bearer tokens, appears in an HTTP header
value without additional quotation/encoding (beyond that supported
by HTTP).  Included a fully concrete example.  Wrote this down once,
where the issue first arises, and referenced it from the other relevant
strategies.

This constraint was elicited in #sig-auth discussion
on Sep 21, and not previously stated explicitly and in a way that
clearly applied to all four kinds of bearer token --- leaving the
reader to wonder if some other encoding is expected.
2016-09-27 16:13:10 -04:00
adieu c42b866ad2 Minor style tweaks. 2016-09-27 17:12:02 +08:00
adieu 838352ff6e Change files in dos format to unix format. Removing ^M. 2016-09-27 17:12:02 +08:00
devin-donnelly ff54de9ae0 Merge pull request #1125 from erictune/rbacgroupref
How to refer to rervice account groups in RBAC
2016-09-26 13:25:14 -07:00
devin-donnelly 53f0dbbe8a Merge pull request #1259 from chmouel/patch-1
minor spelling update
2016-09-26 13:16:05 -07:00
devin-donnelly 971f6a44e7 Merge pull request #549 from mwhooker/patch-1
mark node phase as deprecated
2016-09-26 10:35:35 -07:00
devin-donnelly 98eaa04dc6 Merge pull request #1070 from justinsb/network_plugin_mtu
Document `network-plugin-mtu` option
2016-09-26 10:35:16 -07:00
devin-donnelly 778c119835 Merge pull request #1265 from lukemarsden/master
[WIP] kubeadm and add-on docs
2016-09-26 10:31:43 -07:00
Eric Tune 3750c217ec How to refer to rervice account groups in RBAC 2016-09-26 10:21:27 -07:00
Luke Marsden 10884384de kubeadm and add-ons docs 2016-09-26 14:12:02 +01:00
David Oppenheimer 4a85d6255e Clarify minAvailable approval semantics 2016-09-25 21:30:13 -07:00
Devin Donnelly f4457ae677 Merge remote-tracking branch 'origin' into release-1.4 2016-09-23 16:57:30 -07:00
devin-donnelly 795df8d03e Merge pull request #1276 from madhusudancs/fed-new-deployment
Update the federation admin guide to use the new, simplified deployment mechanism.
2016-09-23 09:55:01 -07:00
Luke Marsden 22a8dbb58e Squashed commits for kubeadm and addons docs. 2016-09-23 14:26:26 +01:00
Madhusudan.C.S 78dccc0366 Address more review comments. 2016-09-22 11:05:18 -07:00
Chmouel Boudjnah d322b78c53 minor spelling update
using mispellings https://pypi.python.org/pypi/misspellings
2016-09-22 11:48:21 +02:00
Madhusudan.C.S af2976b665 Address review comments. 2016-09-22 01:53:56 -07:00
devin-donnelly f2465eec29 Merge pull request #1158 from pallavagarwal07/patch-1
Fix link to kubectl from docs/user-guide/kubectl/kubectl_version.md
2016-09-21 16:28:25 -07:00
devin-donnelly f5e6c1d47b Merge pull request #1196 from derekwaynecarr/disk-eviction
Add documentation for disk based eviction
2016-09-21 15:08:09 -07:00
derekwaynecarr e26aa12e23 Add documentation for disk based eviction 2016-09-21 16:38:35 -04:00
Madhusudan.C.S 80f4dc45fe Update the federation admin guide to use the new, simplified deployment mechanism. 2016-09-20 22:45:55 -07:00
devin-donnelly 3720dcf50d Merge pull request #1246 from calebamiles/release-1.4
Adds documentation for TLS bootstrapping
2016-09-20 13:26:38 -07:00
devin-donnelly 67fb7451ef Merge pull request #1244 from mml/disruption
Add disruption admin guide.
2016-09-20 13:24:08 -07:00
caleb miles d000e77921 Updates docs for TLS bootstrapping.
...now with less passive voice
2016-09-20 09:23:23 -07:00
caleb miles 1cebef8da4 Adds documentation for TLS bootstrapping
Documents workflow for using experimental kublet TLS bootstrapping enabled by https://github.com/kubernetes/features/issues/43
2016-09-20 09:23:23 -07:00
devin-donnelly eacdf9f230 Merge pull request #1213 from markturansky/branch_docs_add
Added pvc quota to docs
2016-09-19 14:57:22 -07:00
Matt Liggett 1117f1a5a6 Add disruption admin guide. 2016-09-19 13:23:40 -07:00
devin-donnelly 56de4ad1e5 Merge pull request #1170 from piosz/rescheduler
Added Rescheduler documentation
2016-09-16 11:08:33 -07:00
markturansky dd8133f716 added pvc quota to docs 2016-09-16 11:39:03 -04:00
Piotr Szczesniak ebd9318f37 Added Rescheduler documentation 2016-09-16 17:02:23 +02:00
Kazuki Suda ef8229f2c6 Fix broken link in the authorization page 2016-09-16 16:23:14 +09:00
Devin Donnelly e0cde221b4 Merge remote-tracking branch 'origin' into release-1.4 2016-09-15 14:40:22 -07:00
devin-donnelly b423faa548 Merge pull request #1188 from ecordell/imagepolicy-webhook-docs
Add ImagePolicyWebhook docs
2016-09-15 14:34:25 -07:00
devin-donnelly e61d5ec4d4 Merge pull request #1216 from Random-Liu/add-node-conformance-test-doc
Add document for node conformance test.
2016-09-15 13:32:55 -07:00
Lantao Liu d56e805a68 Add document for node conformance test. 2016-09-15 11:06:39 -07:00
deads2k 251a6a55f8 describe subjectaccessreview 2016-09-15 13:01:08 -04:00
Pallav Agarwal 36fefcf873 Correct broken links - fix #1154, fix #1161, fix #1162, fix #1163
Fix some broken links in documentation, as well as add a dummy page
for single-node docker with deprecation notice to prevent error with
old links.
2016-09-15 17:26:29 +05:30
devin-donnelly df247395df Merge pull request #1147 from timstclair/aa-docs-1.4
AppArmor documentation
2016-09-14 16:31:07 -07:00
devin-donnelly a380440506 Revert "describe subjectaccessreview" 2016-09-14 14:09:32 -07:00
devin-donnelly ac43058e66 Merge pull request #1219 from deads2k/sar-01
describe subjectaccessreview
2016-09-14 14:08:43 -07:00
deads2k 426b81a497 describe subjectaccessreview 2016-09-14 16:03:05 -04:00
Tim St. Clair 05b2829c7c
AppArmor documentation 2016-09-14 12:49:41 -07:00
Maciej Szulik 78091516e8 Add audit doc 2016-09-14 11:10:55 +02:00
devin-donnelly 4a265eb8e6 Merge pull request #1211 from cjcullen/true
Remove `=true` from gcloud commands
2016-09-13 15:34:31 -07:00
Eric Chiang ec9f1aedc9 docs/admin/authentication: explicitly state the OIDC id_token is used instead of the access_token
Most OAuth2 libraries use the access_token as a bearer token. This
is different for Kubernetes, since the OIDC plugin uses an id_token
instead (also returned in the token response).

Be explicit and call out this difference.
2016-09-13 09:07:52 -07:00
Jan Safranek 93df436435 Add documentation about DefaultStorageClass plugin. 2016-09-13 10:02:17 +02:00
devin-donnelly c11c1f8b04 Merge pull request #1195 from gmarek/nodecontroller1.4
update Node admin doc
2016-09-12 14:58:42 -07:00
Evan Cordell 095f9d436e Add ImagePolicyWebhook docs 2016-09-12 15:26:21 -04:00
CJ Cullen ef63728e62 Remove `=true` from gcloud commands 2016-09-12 11:01:10 -07:00
gmarek 99f7d6d2f1 update Node admin doc 2016-09-12 12:01:02 +02:00
devin-donnelly 27dc318066 Merge pull request #1182 from sttts/sttts-admin-sysctls-1.4
Add docs/admin/sysctls.md
2016-09-09 14:18:18 -07:00
Devin Donnelly 502c2fe184 Merge remote-tracking branch 'origin' into release-1.4 2016-09-08 16:39:34 -07:00
Devin Donnelly 301a3e4da9 Merge branch 'master' into release-1.4 2016-09-08 16:11:25 -07:00
Dr. Stefan Schimanski fe11f5b9b7 Add docs/admin/sysctls.md 2016-09-08 11:59:21 +02:00
devin-donnelly e035d83836 Merge pull request #1166 from ingvagabund/generalize-fedora-steps-for-statis-pods
remove specific Fedora and Kubernetes version when describing configuration
2016-09-07 16:40:26 -07:00
Jan Chaloupka 7608448e4a remove specific Fedora and Kubernetes version when describing configuration 2016-09-06 13:19:47 +02:00