Commit Graph

1411 Commits

Author SHA1 Message Date
Kubernetes Prow Robot cac3c3a17d
Merge pull request #29095 from tengqm/kubeadm-config-122
Kubeadm config reference fix
2021-07-27 07:32:46 -07:00
Kubernetes Prow Robot 7ae9e453b7
Merge pull request #28849 from tengqm/featuregate-1.22-20210708
Batch update feature gates for 1.22
2021-07-27 07:28:46 -07:00
Kubernetes Prow Robot 1f906ce67a
Merge pull request #28827 from AkihiroSuda/kep2033-kubelet-in-userns-aka-rootless
Add `KubeletInUserNamespace` feature gate
2021-07-27 00:54:46 -07:00
Brandon Smith af2f72ad59
Windows HostProcess Container Documentation (#28413)
* Rebasing HostProcess security changes.

* Incorporated initial round of feedback

* Minor wording updates

* Finished up remaining todo items

* Apply suggestions from code review

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Mark Rossetti <marosset@microsoft.com>

* Moved HostProcess security documentation into PSS and create-host-process-pod docs

* Updated with for James' review

* Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>

* Minor edits

* Modifications for additional feedback

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Mark Rossetti <marosset@microsoft.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>
2021-07-27 00:50:45 -07:00
Kubernetes Prow Robot acc7252970
Merge pull request #29025 from robscott/endpoints-rbac
Adding documentation about Endpoints write access in wake of CVE-2021-25740
2021-07-26 23:20:45 -07:00
Akihiro Suda 2860fbf1ad
Add `KubeletInUserNamespace` feature gate
Enables support for running kubelet in a user namespace.
The user namespace has to be created before running kubelet.
All the node components such as CRI need to be running in the same user namespace.

- Tracking issue: kubernetes/enhancements issue 2033
- KEP: https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2033-kubelet-in-userns-aka-rootless
- Implementation: kubernetes/kubernetes PR 92863

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2021-07-27 15:18:46 +09:00
Jiawei Wang ce8641227c Fix csi migration feature gates 2021-07-26 13:14:25 -07:00
Kubernetes Prow Robot 6399fb6c75
Merge pull request #28858 from tengqm/kube-scheduler-config-v1beta2
Switch kube-scheduler config to v1beta2
2021-07-26 12:16:33 -07:00
Kubernetes Prow Robot 5a813f1267
Merge pull request #28430 from margocrawf/master
Add Impersonate-Uid description to Authentication docs page.
2021-07-26 12:02:33 -07:00
Rob Scott d710925768
Adding documentation about Endpoints write access in wake of CVE-2021-25740 2021-07-26 11:32:06 -07:00
Qiming Teng 1427beea15 Kubeadm config reference for 1.22
This PR fixes some type errors found recently.
2021-07-24 11:59:57 +08:00
Kubernetes Prow Robot 54bebd3248
Merge pull request #28872 from tengqm/kubeadm-config-v1beta3
Readd kubeadm config v1beta3 reference for 1.22
2021-07-23 16:19:06 -07:00
Qiming Teng 5239adf5e1 Batch update feature gates for 1.22
Here is a second batch for feature gate updates in 1.22.

- CPUManagerPolicyOptions    kubernetes/kubernetes#101432
- ControllerManagerLeaderMigration  kubernetes/kubernetes#103533
- DynamicKubeletConfig    kubernetes/kubernetes#102966
- EndpointSliceProxying  kubernetes/kubernetes#103451
- EndpointSliceTerminatingCondition  kubernetes/kubernetes#103596
- HugePageStorageMediumSize    kubernetes/kubernetes#99144
- JobTrackingWithFinalizers   kubernetes/kubernetes#98817
  (also tracked in #28841, can rebase).
- ServiceInternalTrafficPolicy  kubernetes/kubernetes#103462
- WindowsEndpointSliceProxying   kubernetes/kubernetes#103451

Some of these needs more detailed documentation.
2021-07-23 15:05:15 +08:00
Kubernetes Prow Robot 09e92f3d5f
Merge pull request #28566 from xiaoxubeii/dev-1.22
Support Memory QoS with cgroups v2 for 1.22 #2570
2021-07-22 23:59:16 -07:00
Qiming Teng 500745dd60 Add kubeadm config reference v1beta3 2021-07-23 13:10:55 +08:00
Kubernetes Prow Robot 9234f9454b
Merge pull request #28070 from enj/enj/f/duration_hint
Update CSR docs with expirationSeconds field details
2021-07-22 18:29:16 -07:00
Kubernetes Prow Robot be5f25eade
Merge pull request #27891 from fromanirh/cpumanager-policy-options
cpumanager: document cpu manager policy options
2021-07-22 05:15:51 -07:00
Francesco Romani 2946586e77
Update content/en/docs/reference/command-line-tools-reference/kubelet.md
Co-authored-by: Danielle <dani@builds.terrible.systems>
2021-07-22 11:45:47 +02:00
Kubernetes Prow Robot f92e3ec2ba
Merge pull request #28903 from sejr/feat/podsecurity
Add Pod Security Standards documentation
2021-07-22 01:57:52 -07:00
Monis Khan f2b27507bd
Update CSR docs with expirationSeconds field details
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-21 16:59:02 -04:00
Monis Khan 9329467e6e
Complete details regarding CSR garbage collection
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-21 16:04:24 -04:00
Samuel Roth e0d4b53b1c incorporating initial round of feedback 2021-07-21 15:33:46 +00:00
Francesco Romani a376a29d7e cpumanager: document cpu manager static policy options
The enhancement https://github.com/kubernetes/enhancements/issues/2625
want to add a new kubelet option to fine tune the behaviour of the
cpu manager policies, and to do so we add support for cpu manager policy
options themselves.

Signed-off-by: Francesco Romani <fromani@redhat.com>
2021-07-21 16:25:19 +02:00
Kubernetes Prow Robot 2007c90673
Merge pull request #28869 from verult/fsgroup-to-csi
Documentation for delegating FSGroup change to CSI driver
2021-07-21 07:04:08 -07:00
Kubernetes Prow Robot 1a7b4a5e2f
Merge pull request #26664 from bart0sh/PR0004-multisize-hugepages-GA
Graduate multiple sizes huge pages to GA
2021-07-21 06:58:08 -07:00
Kubernetes Prow Robot 83f6cb6ed4
Merge pull request #28429 from ankeesler/exec-credential-v1
exec credential provider: v1 documentation
2021-07-21 06:54:07 -07:00
Kubernetes Prow Robot 793c66fffc
Merge pull request #28474 from SergeyKanzhelev/deprecateDynamicKubeletConfig
deprecation of DynamicKubeletConfig feature flag
2021-07-21 06:52:08 -07:00
Elana Hashman 429638be6a
Add swap memory to node documentation 2021-07-20 11:18:42 -07:00
Cheng Xing ac68a21c9a Documentation for delegating FSGroup change to CSI driver 2021-07-19 14:28:07 -07:00
Ed Bartosh 7a0f9bc01e Graduate multiple sizes huge pages to GA
Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
2021-07-19 12:51:19 +03:00
xiaoxubeii f21eaae616 Add feature gates description for MemoryQoS. 2021-07-17 10:36:25 +08:00
Aldo Culquicondor a6b6a976c3 Add feature gate JobTrackingWithFinalizers
and describe its behavior

Signed-off-by: Aldo Culquicondor <acondor@google.com>
2021-07-15 10:03:13 -04:00
Andrew Keesler a30e63dcd6
exec credential provider: v1 documentation
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-07-13 10:47:14 -04:00
Qiming Teng e9730d3e95 Switch kube-scheduler config to v1beta2 2021-07-13 14:16:44 +08:00
Margo Crawford d77368133a Add Impersonate-Uid description to Authentication docs page.
This change goes with https://github.com/kubernetes/kubernetes/pull/99961
in the Kubernetes repo.
2021-07-12 13:17:42 -07:00
Kubernetes Prow Robot a1fd3a2d57
Merge pull request #28839 from alculquicondor/scheduler_config
Update plugin names and deprecations for scheduler config
2021-07-12 11:09:42 -07:00
Christopher Negus 548ba073da Merge main into dev-1.22 to keep in sync 2021-07-09 18:19:13 +00:00
Kubernetes Prow Robot 0606d22bae
Merge pull request #28878 from astraw99/patch-1
Fix pending CSR delete time is 24 hours
2021-07-09 09:02:53 -07:00
Kubernetes Prow Robot e13a8fbba0
Merge pull request #28871 from tengqm/kubeadm-config-1.21
Update kubeadm config reference for 1.21
2021-07-09 07:50:53 -07:00
Aldo Culquicondor a5c3c66fc9 Update plugin names and deprecations for scheduler config
Signed-off-by: Aldo Culquicondor <acondor@google.com>
2021-07-09 10:15:45 -04:00
AStraw dd443f0238
Fix pending CSR deleted time is 24 hours
From the code, the `pendingExpiration  = 24 * time.Hour`, so the pending CSR deleted time is 24 hours.
2021-07-09 16:49:54 +08:00
Kubernetes Prow Robot 2b97646e39
Merge pull request #28816 from haardikdharma10/list-ControllerManagerLeaderMigration-feature-gate
List ControllerManagerLeaderMigration feature gate in feature gates page
2021-07-08 19:26:53 -07:00
Qiming Teng 0696f6181a Update kubeadm config reference for 1.21
The `v1beta3` version is a 1.22 thing, not 1.21 (main). This PR replaces the `v1beta3` version by `v1beta2`. A follow up PR will add the `v1beta3` to the `dev-1.22` branch.
2021-07-09 09:22:07 +08:00
Kubernetes Prow Robot 4c6a904242
Merge pull request #28360 from neolit123/1.22-add-v1beta3
kubeadm: use the new v1beta3 instead of v1beta2
2021-07-08 09:42:54 -07:00
Kubernetes Prow Robot e10ad9024a
Merge pull request #28102 from damemi/log-scaledown-1.22
Update LogarithmicScaleDown featuregate docs
2021-07-08 08:04:54 -07:00
Kubernetes Prow Robot fbc0bf209e
Merge pull request #28775 from tengqm/kubeadm-config
Add reference doc for kubeadm config
2021-07-08 01:30:53 -07:00
Sergey Kanzhelev a4fbeb27dc deprecation of DynamicKubeletConfig feature flag 2021-07-08 00:11:52 +00:00
Qiming Teng 2ba16150ec Add reference doc for kubeadm config
This reference is auto-generated from the upstream source using the
reference-docs/genref tool.
2021-07-07 22:17:28 +08:00
Haardik Dharma 7e732774ca Update feature-gates.md 2021-07-07 15:47:35 +05:30
Haardik Dharma 4222cb1b46 Update feature-gates.md 2021-07-07 03:55:24 +05:30