Karen Bradshaw
3fd65482e8
clean up use of word: simply
2021-02-07 12:15:29 -05:00
Kubernetes Prow Robot
d2e7f4acab
Merge pull request #26352 from kbhawkey/fixup-remove-word-easy
...
clean up use of word: easy
2021-02-04 10:48:26 -08:00
Kubernetes Prow Robot
d148026f23
Merge pull request #26065 from margocrawf/master
...
Rewording of paragraph about provideClusterInfo key on Authentication page
2021-02-03 03:02:29 -08:00
Margo Crawford
67a750b5e0
Incorporated suggestions for provideClusterInfo paragraph
...
Signed-off-by: Margo Crawford <margaretc@vmware.com>
2021-02-01 15:35:49 -08:00
Karen Bradshaw
7d9916af0c
clean up use of word: easy
2021-02-01 15:14:25 -05:00
RainbowMango
f079aa8214
Update validatingadmissionwebhook and mutatingadmissionwebhook docs as they have been promoted to v1
2021-01-30 16:09:29 +08:00
Kubernetes Prow Robot
c782fd6738
Merge pull request #25982 from ydFu/add-code-blocks-in-authorization
...
Add the code blocks in authorization.md
2021-01-29 10:25:41 -08:00
Kubernetes Prow Robot
34e8b55faf
Merge pull request #26027 from tengqm/clean-podpreset
...
Clean PodPreset docs, examples and links
2021-01-15 07:39:51 -08:00
Edward Rosen
08fe76be1a
Update rbac.md
2021-01-14 09:50:57 -05:00
Qiming Teng
a11047c153
Clean PodPreset docs, examples and links
2021-01-14 13:26:29 +08:00
Kubernetes Prow Robot
2135ed8002
Merge pull request #25856 from edwardrosen/patch-1
...
Update rbac.md
2021-01-12 16:00:36 -08:00
Margo Crawford
5accf8f128
Rewording of paragraph about provideClusterInfo key
...
Signed-off-by: Margo Crawford <margaretc@vmware.com>
2021-01-12 13:51:15 -08:00
Edward Rosen
a37b8a9fee
Update rbac.md
...
I've deleted the line break. The example in line 89 now seems to render ok in the preview. Could you please take a look?
2021-01-12 15:22:39 -05:00
ydFu
1b70e98626
Add the code blocks in authorization.md
...
* Add the code blocks in the Markdown spec to make it easy to read.
* Add description that distinguish between **command** and **output** make it easy to read.
* Adjust description in Kubernetes components for smoother reading.
Signed-off-by: ydFu <ader.ydfu@gmail.com>
2021-01-09 11:57:24 +08:00
Edward Rosen
284d725ee0
Update rbac.md
...
I added a <br> after the end of the third bullet and backed out all of the other changes I suggested in the original pull request. I think this better matches the author's original intent. The only difference now between what's currently published and this edit is the line break coded after the third bullet.
2021-01-08 14:10:01 -05:00
Roman Marusyk
0245ad3aad
Remove too old content
2021-01-05 20:57:13 +02:00
Edward Rosen
95577c1fa5
Update rbac.md
...
The page renders the third bullet as a run-on sentence. I'm suggesting the example be placed in parentheses.
2020-12-29 16:20:54 -05:00
Rajesh Jain
7a175d551a
Update rbac.md
...
The language "For all service accounts in the "qa" namespace" in the example is confusing namespaces and groups. Language fixed to disambiguate between group and namespace. An additional example provided which uses both the group ("dev") AND the namespace ("development") to further illustrate this point
2020-12-26 13:41:02 -08:00
Kristin Martin
86d9492ccb
Merge remote-tracking branch 'upstream/master' into merged-master-dev-1.20
2020-12-03 11:58:44 -08:00
TAKAHASHI Shuuji
2bc7fbad27
Fix the text in the authorization diagram
2020-11-26 19:09:42 +09:00
Kubernetes Prow Robot
cb802d23b1
Merge pull request #25147 from timhughes/patch-1
...
Updates links to Dex
2020-11-25 21:46:19 -08:00
reylejano-rxm
d8ae37587e
Merge remote-tracking branch 'upstream/master' into dev-1.20 to keep in sync - 11-25-2020
2020-11-25 07:03:22 -08:00
Tim Hughes
f5132af21e
Updates links to Dex
2020-11-25 13:48:56 +00:00
TAKAHASHI Shuuji
b5c0e5ea14
Replace the diagram on authentication page with the one by mermaid.
2020-11-23 14:12:21 +09:00
mkontani
c2a33c3403
fix dex/kubernetes link
2020-11-19 18:09:22 +00:00
Kubernetes Prow Robot
20546141c0
Merge pull request #24698 from SergeyKanzhelev/runtimeGA
...
RuntimeClass GA
2020-11-12 03:10:50 -08:00
Irvi Aini
bb33373bb3
Merge branch 'master' into dev-1.20
2020-11-11 14:55:30 +01:00
Kubernetes Prow Robot
6d90079245
Merge pull request #23842 from tengqm/improve-sa-admin
...
Improve ServiceAccount administration doc
2020-11-10 18:25:48 -08:00
Shihang Zhang
0b4952dd88
separate RootCAConfigMap from BoundServiceAccountToken and Beta
2020-11-10 15:18:29 -08:00
Kubernetes Prow Robot
358bc69dde
Merge pull request #24878 from ebriand/patch-5
...
Update default admission plugins for 1.19
2020-11-08 12:07:37 -08:00
Eric Briand
cee9e620ca
Use different wording to not quote current version
2020-11-05 17:21:08 +01:00
Kubernetes Prow Robot
b436a816e9
Merge pull request #24889 from reylejano-rxm/merged-master-dev-1.20
...
Merge master into dev-1.20 to keep in sync - 11-4-20
2020-11-04 12:46:53 -08:00
Kubernetes Prow Robot
44fd64ef5c
Merge pull request #24639 from ankeesler/exec-cred-prov-cluster-info
...
exec credential provider: cluster info details
2020-11-04 11:20:52 -08:00
reylejano-rxm
48266bd653
Merge remote-tracking branch 'upstream/master' into dev-1.20
2020-11-04 10:32:10 -08:00
Eric Briand
c869ef67a8
Update default admission plugins for 1.19
2020-11-04 09:56:20 +01:00
Tim Hockin
300c2e8545
Better docs for standard topology labels
...
As per KEP 1659, topology labels are now more formalized. Move away
from the older `failure-domain.beta` names ands use `topology` names
instead.
2020-11-03 11:27:58 -08:00
Andrew Keesler
c855d5d68c
exec credential provider: make arbitrary JSON more explicit
...
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-11-03 12:19:16 -05:00
Sergey Kanzhelev
63283f5c31
Update content/en/docs/reference/access-authn-authz/admission-controllers.md
2020-10-29 17:22:26 -07:00
Sergey Kanzhelev
6d51948652
Update content/en/docs/reference/access-authn-authz/admission-controllers.md
...
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2020-10-29 17:19:11 -07:00
Sergey Kanzhelev
72a66b6969
RuntimeClass GA
2020-10-23 20:57:54 +00:00
eagleusb
45ec60bed5
Merge master into dev-1.20 to keep in sync
2020-10-22 17:44:02 +02:00
Qiming Teng
00fd1a68f2
Fix links in reference section
2020-10-22 15:19:30 +08:00
Qiming Teng
2ff3d1f7d3
Improve ServiceAccount administration doc
...
This PR fixes some nits in the doc and slightly revised the content to
conform to content guidelines.
2020-10-21 10:47:08 +08:00
Tim Bannister
78351ecaf5
Transfer “Controlling Access to the Kubernetes API” to the Concepts section
...
Readers from several different backgrounds will find it useful to know
about how Kubernetes controls access to its API. Promote this overview
to the Security subsection of Concepts.
2020-10-20 23:41:56 +01:00
Tim Bannister
3edb970570
Move API overview to be a Docsy section overview
2020-10-20 23:41:54 +01:00
Kubernetes Prow Robot
ac8ce96c08
Merge pull request #24653 from jpetazzo/clarify-csr-cluster-signing-duration
...
Clarify expiration of certificates signed by kube-controller-manager
2020-10-20 14:28:19 -07:00
Kubernetes Prow Robot
7cfdee6b87
Merge pull request #22715 from logicalhan/monitoring
...
add documentation for system:monitoring rbac policy
2020-10-20 14:22:21 -07:00
Jerome Petazzoni
1932647552
Clarify expiration/lifetime of certificates signed by kube-controller-manager
...
The current wording of the documentation suggests that the duration/expiration
of the certificates can be changed by asking a specific time in the CSR. While
it's technically possible to specify a duration (e.g. as a custom annotation),
there is no agreed-upon method to do so, and the built-in signer uses a fixed
expiration time anyway.
This clarifies the situation.
See kubernetes/kubernetes#92678 for discussion.
Signed-off-by: Jerome Petazzoni <jerome.petazzoni@gmail.com>
2020-10-20 22:37:25 +02:00
Kubernetes Prow Robot
df5f80f69b
Merge pull request #24604 from mdgrotheer/patch-1
...
Update authentication.md
2020-10-20 11:48:19 -07:00
Qiming Teng
92a09b23fa
Style tweaking for CSR reference page
2020-10-20 09:08:54 +08:00