0144870f60
- Removed .md typo formatting to render the webpage.
2024-05-09 17:27:46 +05:30
085c4cd168
Reword advice about replicated encryption configuration
2024-05-01 12:29:11 +01:00
47f15991d9
Revise callouts in encryption-at-rest task page
2024-05-01 12:29:11 +01:00
9647701853
Clean up a task: kubelet-config-file
2024-04-29 22:01:31 +08:00
305078d22e
Merge pull request #45778 from mrgiles/45539_shell_access_to_node_before_upgrade
...
Add shell access prereq to node upgrade cluster task
2024-04-22 15:34:40 -07:00
a47f72b372
Merge pull request #45225 from sftim/20240220_auto_calculate_more_feature_states
...
Switch more feature-state shortcodes to be data driven
2024-04-22 13:33:11 -07:00
7b6866063f
Switch more feature-state shortcodes to be data driven
...
When the feature gates graduate (or get deprecated), the associated
shortcode will update automatically.
2024-04-22 13:02:28 +01:00
6fa7b80ae3
Config API reference for v1.30
2024-04-18 19:57:27 +08:00
7a91dcc078
Add shell access prereq to node upgrade cluster task
...
Add shell access prereq to node upgrade task
2024-04-05 11:50:25 -07:00
c306367734
docs: Update KubeletConfigDropinDir doc information
...
Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-03-26 10:43:27 -04:00
fe501f8bfa
Change cri-dockerd links to official docs in the english content
2024-03-08 11:46:54 -07:00
6d5a60c089
Merge pull request #45307 from eaudetcobello/patch-1
...
Fix wording in configure-upgrade-etcd.md
2024-02-27 13:36:21 -08:00
bb24ce5ab8
Merge pull request #45095 from clementnuss/patch-3
...
docs(kubeadm-upgrade): add consideration on etcd upgrade impact
2024-02-23 21:33:25 -08:00
a8ec490629
Various wording improvements throughout the file.
2024-02-23 16:23:13 +00:00
d6459c1823
Update content/en/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy.md
...
Co-authored-by: Bryan Boreham <bjboreham@gmail.com>
2024-02-22 11:32:53 -06:00
713d621b60
fix: update broken links
2024-02-21 12:56:16 -06:00
51b0ebc934
Merge pull request #45073 from neolit123/1.30-add-external-ca-notes
...
kubeadm-certs: add notes about different external CA approaches
2024-02-16 09:53:39 -08:00
217f88267f
Merge pull request #44832 from adityasamant25/kubeadm-upgrade
...
Use sudo for elevated permissions while upgrading clusters using kubeadm
2024-02-15 12:24:12 -08:00
2dc571df77
docs(kubeadm-upgrade): add consideration on etcd upgrade impact
...
relates to https://github.com/kubernetes/kubeadm/issues/2991#issuecomment-1932337556
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
Signed-off-by: Clément Nussbaumer <clement.nussbaumer@postfinance.ch>
2024-02-14 08:03:53 +01:00
9593771ee9
kubeadm-certs: add notes about different external CA approaches
...
There are multiple ways to prepare the credentials for use
with "external CA" mode:
- manual
- using kubeadm CSRs
- using kubeadm phases
2024-02-09 12:23:03 +02:00
6d6b17abd1
Reword advice about encryption-at-rest opt outs
...
Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
2024-01-31 15:59:25 +00:00
54ab2e8149
Merge pull request #44897 from mengjiao-liu/fix-dns-autoscaler-name
...
Fix Deployment and ConfigMap name in the dns-horizontal-autoscaling page
2024-01-26 17:46:31 +01:00
6089916922
Merge pull request #44801 from sftim/20240118_revise_encryption_at_rest
...
Revise introduction to encryption at rest page
2024-01-26 17:27:42 +01:00
54145dd9cb
Merge pull request #43824 from ptrovatelli/patch-1
...
Update configure-upgrade-etcd.md
2024-01-26 02:47:03 +01:00
7e2f696572
Fix Deployment and ConfigMap name in the dns-horizontal-autoscaling page
2024-01-25 15:51:03 +08:00
c6e210f8f1
Added sudo permissions as necessary.
2024-01-24 15:32:46 +05:30
fbf9b4fd7c
Merge pull request #44776 from BRONSOLO/patch-1
...
Update encrypt-data.md
2024-01-19 23:22:41 +01:00
dd7e3966ef
Revise introduction to encryption at rest page
...
Help readers check if they need to follow the task.
2024-01-19 00:23:25 +00:00
ef9194bdf3
Merge pull request #44721 from sftim/20240112_revise_encryption_at_rest
...
Recommend replicating encryption key for API data encryption at rest
2024-01-17 16:56:30 +01:00
b1929ab8a8
Update encrypt-data.md
...
Fix as ---> at typo
2024-01-17 10:40:02 -05:00
0f9ab60a3c
Update CoreDNS installation docs
...
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2024-01-14 20:29:41 +05:30
5ee30f167a
fixed installation guide in using CoreDNS for Service Discovery page
2024-01-14 19:41:35 +05:30
0e05396f1b
Recommend replicating encryption key
...
When using API encryption at rest without KMS, the same encryption key
must be securely replicated to all the hosts that run a kube-apiserver.
Document that.
2024-01-12 14:38:25 +00:00
8106c6e092
Add notes on kubeadm clusters version ( #44683 )
...
* Add notes on kubeadm clusters version
Update content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
move into additional information
* Update content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
---------
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2024-01-09 18:07:50 +01:00
bfbe2db97b
Highlight initial comment
...
Make the initial comment extra obvious to readers.
2024-01-08 17:55:46 +00:00
ec8a3cb52d
Merge pull request #44532 from sftim/20231226_encryption_at_rest
...
Improve docs around API data encryption at rest
2024-01-08 18:32:23 +01:00
bcc55ae7c9
fix outdated link/anchor
...
Signed-off-by: hunshcn <hunsh.cn@gmail.com>
2024-01-03 15:00:11 +08:00
e2509cb624
Merge pull request #44506 from Takashiidobe/fix-typos
...
fix typos
2024-01-02 19:29:55 +01:00
e17cd06c3d
Revise guidance for rotating a decryption key
2024-01-02 11:14:30 +00:00
b749f91f12
Document avoiding plain text retrieval
...
When you have set up your cluster for encryption at rest, you can take
this defence in depth measure to make sure that anything held without
encryption causes a retrieval error (which is then more likely to flag
that there is a problem).
2024-01-02 11:14:30 +00:00
8b46ec4047
Fix several link errors
2024-01-01 21:15:50 +08:00
c807f97145
Merge pull request #44355 from hunshcn/sysctl
...
update safe sysctls (v1.29)
2023-12-27 12:44:29 +01:00
0f285fd32d
Merge pull request #44085 from sftim/20231125_explain_protection_encryption_keys
...
Explain more about protection for encryption keys (API data encryption at rest)
2023-12-26 07:18:49 +01:00
fc8e79b96c
update safe sysctl
...
Signed-off-by: hunshcn <hunsh.cn@gmail.com>
2023-12-25 10:47:54 +08:00
d536e46dbd
fix typos
2023-12-24 21:00:53 -05:00
ada845e5e1
Link to KMS setup doc
2023-12-22 11:33:36 +00:00
9f8b35d93f
Redo API encryption at rest explanation
...
- Explain importance of protecting keys and other material that can be
used to decrypt data in etcd
- Revise the explanation for a non-KMS setup example
2023-12-22 11:33:36 +00:00
057c9633a3
Merge pull request #44227 from windsonsea/changey
...
Clean up change-default-storage-class and access-cluster-api tasks
2023-12-22 02:21:22 +01:00
242296af2a
Remove extra character
...
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
2023-12-20 00:34:51 +00:00
80353185f5
Remove extra character
2023-12-19 23:17:19 +00:00
Vishal Bidwe