Commit Graph

261 Commits

Author SHA1 Message Date
Karen Bradshaw 3fd65482e8 clean up use of word: simply 2021-02-07 12:15:29 -05:00
Kubernetes Prow Robot d2e7f4acab
Merge pull request #26352 from kbhawkey/fixup-remove-word-easy
clean up use of word: easy
2021-02-04 10:48:26 -08:00
Kubernetes Prow Robot d148026f23
Merge pull request #26065 from margocrawf/master
Rewording of paragraph about provideClusterInfo key on Authentication page
2021-02-03 03:02:29 -08:00
Margo Crawford 67a750b5e0 Incorporated suggestions for provideClusterInfo paragraph
Signed-off-by: Margo Crawford <margaretc@vmware.com>
2021-02-01 15:35:49 -08:00
Karen Bradshaw 7d9916af0c clean up use of word: easy 2021-02-01 15:14:25 -05:00
RainbowMango f079aa8214 Update validatingadmissionwebhook and mutatingadmissionwebhook docs as they have been promoted to v1 2021-01-30 16:09:29 +08:00
Kubernetes Prow Robot c782fd6738
Merge pull request #25982 from ydFu/add-code-blocks-in-authorization
Add the code blocks in authorization.md
2021-01-29 10:25:41 -08:00
Kubernetes Prow Robot 34e8b55faf
Merge pull request #26027 from tengqm/clean-podpreset
Clean PodPreset docs, examples and links
2021-01-15 07:39:51 -08:00
Edward Rosen 08fe76be1a
Update rbac.md 2021-01-14 09:50:57 -05:00
Qiming Teng a11047c153 Clean PodPreset docs, examples and links 2021-01-14 13:26:29 +08:00
Kubernetes Prow Robot 2135ed8002
Merge pull request #25856 from edwardrosen/patch-1
Update rbac.md
2021-01-12 16:00:36 -08:00
Margo Crawford 5accf8f128 Rewording of paragraph about provideClusterInfo key
Signed-off-by: Margo Crawford <margaretc@vmware.com>
2021-01-12 13:51:15 -08:00
Edward Rosen a37b8a9fee
Update rbac.md
I've deleted the line break. The example in line 89 now seems to render ok in the preview. Could you please take a look?
2021-01-12 15:22:39 -05:00
ydFu 1b70e98626 Add the code blocks in authorization.md
* Add the code blocks in the Markdown spec to make it easy to read.

* Add description that distinguish between **command** and **output** make it easy to read.

* Adjust description in Kubernetes components for smoother reading.

Signed-off-by: ydFu <ader.ydfu@gmail.com>
2021-01-09 11:57:24 +08:00
Edward Rosen 284d725ee0
Update rbac.md
I added a <br> after the end of the third bullet and backed out all of the other changes I suggested in the original pull request. I think this better matches the author's original intent. The only difference now between what's currently published and this edit is the line break coded after the third bullet.
2021-01-08 14:10:01 -05:00
Roman Marusyk 0245ad3aad
Remove too old content 2021-01-05 20:57:13 +02:00
Edward Rosen 95577c1fa5
Update rbac.md
The page renders the third bullet as a run-on sentence. I'm suggesting the example be placed in parentheses.
2020-12-29 16:20:54 -05:00
Rajesh Jain 7a175d551a
Update rbac.md
The language "For all service accounts in the "qa" namespace" in the example is confusing namespaces and groups. Language fixed to disambiguate between group and namespace. An additional example provided which uses both the group ("dev") AND the namespace ("development") to further illustrate this point
2020-12-26 13:41:02 -08:00
Kristin Martin 86d9492ccb Merge remote-tracking branch 'upstream/master' into merged-master-dev-1.20 2020-12-03 11:58:44 -08:00
TAKAHASHI Shuuji 2bc7fbad27
Fix the text in the authorization diagram 2020-11-26 19:09:42 +09:00
Kubernetes Prow Robot cb802d23b1
Merge pull request #25147 from timhughes/patch-1
Updates links to Dex
2020-11-25 21:46:19 -08:00
reylejano-rxm d8ae37587e Merge remote-tracking branch 'upstream/master' into dev-1.20 to keep in sync - 11-25-2020 2020-11-25 07:03:22 -08:00
Tim Hughes f5132af21e Updates links to Dex 2020-11-25 13:48:56 +00:00
TAKAHASHI Shuuji b5c0e5ea14 Replace the diagram on authentication page with the one by mermaid. 2020-11-23 14:12:21 +09:00
mkontani c2a33c3403 fix dex/kubernetes link 2020-11-19 18:09:22 +00:00
Kubernetes Prow Robot 20546141c0
Merge pull request #24698 from SergeyKanzhelev/runtimeGA
RuntimeClass GA
2020-11-12 03:10:50 -08:00
Irvi Aini bb33373bb3
Merge branch 'master' into dev-1.20 2020-11-11 14:55:30 +01:00
Kubernetes Prow Robot 6d90079245
Merge pull request #23842 from tengqm/improve-sa-admin
Improve ServiceAccount administration doc
2020-11-10 18:25:48 -08:00
Shihang Zhang 0b4952dd88 separate RootCAConfigMap from BoundServiceAccountToken and Beta 2020-11-10 15:18:29 -08:00
Kubernetes Prow Robot 358bc69dde
Merge pull request #24878 from ebriand/patch-5
Update default admission plugins for 1.19
2020-11-08 12:07:37 -08:00
Eric Briand cee9e620ca
Use different wording to not quote current version 2020-11-05 17:21:08 +01:00
Kubernetes Prow Robot b436a816e9
Merge pull request #24889 from reylejano-rxm/merged-master-dev-1.20
Merge master into dev-1.20 to keep in sync - 11-4-20
2020-11-04 12:46:53 -08:00
Kubernetes Prow Robot 44fd64ef5c
Merge pull request #24639 from ankeesler/exec-cred-prov-cluster-info
exec credential provider: cluster info details
2020-11-04 11:20:52 -08:00
reylejano-rxm 48266bd653 Merge remote-tracking branch 'upstream/master' into dev-1.20 2020-11-04 10:32:10 -08:00
Eric Briand c869ef67a8
Update default admission plugins for 1.19 2020-11-04 09:56:20 +01:00
Tim Hockin 300c2e8545 Better docs for standard topology labels
As per KEP 1659, topology labels are now more formalized.  Move away
from the older `failure-domain.beta` names ands use `topology` names
instead.
2020-11-03 11:27:58 -08:00
Andrew Keesler c855d5d68c
exec credential provider: make arbitrary JSON more explicit
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-11-03 12:19:16 -05:00
Sergey Kanzhelev 63283f5c31
Update content/en/docs/reference/access-authn-authz/admission-controllers.md 2020-10-29 17:22:26 -07:00
Sergey Kanzhelev 6d51948652
Update content/en/docs/reference/access-authn-authz/admission-controllers.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2020-10-29 17:19:11 -07:00
Sergey Kanzhelev 72a66b6969 RuntimeClass GA 2020-10-23 20:57:54 +00:00
eagleusb 45ec60bed5
Merge master into dev-1.20 to keep in sync 2020-10-22 17:44:02 +02:00
Qiming Teng 00fd1a68f2 Fix links in reference section 2020-10-22 15:19:30 +08:00
Qiming Teng 2ff3d1f7d3 Improve ServiceAccount administration doc
This PR fixes some nits in the doc and slightly revised the content to
conform to content guidelines.
2020-10-21 10:47:08 +08:00
Tim Bannister 78351ecaf5 Transfer “Controlling Access to the Kubernetes API” to the Concepts section
Readers from several different backgrounds will find it useful to know
about how Kubernetes controls access to its API. Promote this overview
to the Security subsection of Concepts.
2020-10-20 23:41:56 +01:00
Tim Bannister 3edb970570 Move API overview to be a Docsy section overview 2020-10-20 23:41:54 +01:00
Kubernetes Prow Robot ac8ce96c08
Merge pull request #24653 from jpetazzo/clarify-csr-cluster-signing-duration
Clarify expiration of certificates signed by kube-controller-manager
2020-10-20 14:28:19 -07:00
Kubernetes Prow Robot 7cfdee6b87
Merge pull request #22715 from logicalhan/monitoring
add documentation for system:monitoring rbac policy
2020-10-20 14:22:21 -07:00
Jerome Petazzoni 1932647552 Clarify expiration/lifetime of certificates signed by kube-controller-manager
The current wording of the documentation suggests that the duration/expiration
of the certificates can be changed by asking a specific time in the CSR. While
it's technically possible to specify a duration (e.g. as a custom annotation),
there is no agreed-upon method to do so, and the built-in signer uses a fixed
expiration time anyway.

This clarifies the situation.

See kubernetes/kubernetes#92678 for discussion.

Signed-off-by: Jerome Petazzoni <jerome.petazzoni@gmail.com>
2020-10-20 22:37:25 +02:00
Kubernetes Prow Robot df5f80f69b
Merge pull request #24604 from mdgrotheer/patch-1
Update authentication.md
2020-10-20 11:48:19 -07:00
Qiming Teng 92a09b23fa Style tweaking for CSR reference page 2020-10-20 09:08:54 +08:00