d77111d096
Remove beta pre-requisites
...
With 1.30 stable, the feature does not need to be enabled and the v1beta1 API group is not needed.
2024-08-01 09:08:20 +02:00
ee1fa4340f
Merge pull request #46544 from my-git9/pt-10139
...
improve format for bootstrap-tokens certificate-signing-requests
2024-07-31 22:08:06 -07:00
7215e3919f
improve format for bootstrap-tokens certificate-signing-requests
...
Signed-off-by: xin.li <xin.li@daocloud.io>
2024-07-30 19:59:39 +08:00
ce56779401
Merge pull request #45466 from tuladhar/improve-rbac-doc
...
Improve RBAC document with correct references to cluster role binding
2024-07-30 02:18:52 -07:00
1f9b4761a2
Merge pull request #47193 from rodrigc/certificatesigningrequest-link
...
Add links to CertificateSigningRequest API
2024-07-18 00:02:07 -07:00
2aa8266591
Merge pull request #47121 from micahhausler/csr-node-clarification
...
Clarify kubelet serving and client cert CN values
2024-07-17 23:53:52 -07:00
8e59b9f392
Update certificate-signing-requests.md
2024-07-18 14:52:26 +08:00
a55b1057be
Add links to CertificateSigningRequest API
...
Signed-off-by: Craig Rodrigues <rodrigc@crodrigues.org>
2024-07-17 20:41:13 -07:00
80d2f96c93
Update extensible-admission-controllers.md
...
fix typo
2024-07-16 13:26:09 -04:00
a2ca418a9a
Clarify kubelet serving and client cert CN values
...
Signed-off-by: Micah Hausler <mhausler@amazon.com>
2024-07-09 08:27:50 -07:00
a7fe6cf8c5
Update content/en/docs/reference/access-authn-authz/rbac.md
...
Co-authored-by: Junya Okabe <86868255+Okabe-Junya@users.noreply.github.com>
2024-06-28 15:48:33 +05:45
c05e239c86
Merge pull request #44643 from T-Lakshmi/rbac
...
Reworded 'beyond discovery permissions' wording in "Using RBAC Authorization" page
2024-06-11 09:48:44 -07:00
ea91c4b588
clean up access-authn-authz/authentication.md
2024-05-26 21:05:31 +08:00
8201801a97
Fixing heading in authorization.md
...
Signed-off-by: vijaynag-bs <vijaynag.bs@gmail.com>
2024-05-12 14:28:59 +05:30
8a122ff9ca
Fix page title
...
Omit “Overview” to match the authentication topic.
2024-04-23 01:42:43 +01:00
5fdccf9f2f
Revise advice about authz modes
2024-04-23 01:42:42 +01:00
f833f4f671
Revise authz page
...
Improve how we explain authz, and remove some existing duplication.
Co-Authored-By: Rita Zhang <rita.z.zhang@gmail.com>
2024-04-23 01:42:20 +01:00
9f327512c6
Reorder authn/authz pages
...
Group topics together, in order of how these happen within Kubernetes'
API server's processing chain (authn, then authz, then admission
control).
2024-04-23 01:42:18 +01:00
37b0b3ed72
Merge remote-tracking branch 'upstream/main' into dev-1.30
2024-04-10 23:04:57 +05:30
ba458ace13
Add certificateAuthority in structured authn docs
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-04-09 14:31:37 -07:00
cdf1ed1236
Merge remote-tracking branch 'upstream/main' into dev-1.30
...
Merge main into dev-1.30 to keep in sync
2024-04-02 10:05:03 -04:00
00d526659e
Make KEP-4193 documentation updates ( #45292 )
...
* KEP-4193: beta documentation updates
* Apply suggestions from code review
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
* Apply suggestions from code review
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
* include example JTI and node-name/uid output
* Update service-accounts-admin.md
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
---------
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
2024-03-26 13:45:05 -07:00
3ef1d0bb84
Fix docs for authentication: s/errors/error
2024-03-24 09:56:05 -07:00
864ac8bec6
Merge pull request #45108 from aramase/aramase/d/kep_3331_beta_docs
...
Add docs for Structured Authn beta
2024-03-24 03:08:39 -07:00
c4e3177ff3
Add feature gate metadata for structured authz config
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-19 14:02:50 -07:00
b35e434193
Add docs for Structured Authn beta
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-19 13:51:32 -07:00
c889d9b251
Add metadata to use mechanism for API reference links
2024-03-14 14:50:24 +00:00
0f8e1fadea
Merge pull request #45249 from cici37/3488
...
[KEP-3488]Promoting ValidatingAdmissionPolicy to GA
2024-03-12 17:05:49 -07:00
b8514fcb5e
Merge pull request #45138 from ritazh/kep_3221_beta_docs
...
Add docs for Structured Authz beta
2024-03-12 10:59:04 -07:00
4bffa3c7fa
Mark feature AdmissionWebhookMatchConditions to stable in 1.30
2024-03-12 10:14:31 -07:00
0fc8d236e0
Promote ValidatingAdmissionPolicy to GA
2024-03-11 22:48:54 +00:00
a556984b94
Add docs for Structured Authz beta
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2024-03-11 08:27:41 -07:00
a66d974f1a
Improve
2024-03-08 00:49:02 +05:45
e1465e035a
Merge remote-tracking branch 'upstream/main' into dev-1.30
2024-02-20 11:46:04 +01:00
e4731338d3
Switch some feature-state shortcodes to be data driven
...
When the feature gates graduate (or get deprecated), the associated
shortcode will update automatically.
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
2024-02-16 12:49:31 +00:00
ca4dc02375
Remove the SecurityContextDeny admission plugin documentation
2024-02-14 16:39:37 +01:00
121d47db90
Update authentication.md
...
Azure Active Directory is now Microsoft Entra ID.
Changing for the sake of correctness.
2024-01-19 01:06:19 +05:30
2167f9075c
rephrase the content
2024-01-05 15:35:55 +05:30
bcc55ae7c9
fix outdated link/anchor
...
Signed-off-by: hunshcn <hunsh.cn@gmail.com>
2024-01-03 15:00:11 +08:00
d536e46dbd
fix typos
2023-12-24 21:00:53 -05:00
fcfeeac989
fix value in structured authn config example
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-12-13 21:43:11 +00:00
deaf1b920a
Merge remote-tracking branch 'upstream/main' into dev-1.29
2023-11-29 15:33:49 -06:00
c0a72d25d8
added doc for setting up cloud provider kubectl auth via plugin
...
Signed-off-by: GitHub <noreply@github.com>
2023-11-29 13:26:04 +00:00
7c2f5c4583
Merge pull request #43397 from aramase/aramase/d/kep_3331_v1alpha1_docs_v1.29
...
add docs for StructuredAuthenticationConfig v1alpha1
2023-11-28 09:47:41 +01:00
74caa0daaa
review feedback
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-11-27 20:03:23 +00:00
123973c2e8
Merge pull request #41892 from palnabarun/authz-config-docs
...
Add docs for Authorization Configuration
2023-11-27 13:59:40 +01:00
21ac70ee24
Wrap markdown text
...
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-11-27 16:16:40 +05:30
03e2976d90
Add more context to downgrade example
...
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-11-24 12:03:35 +05:30
2d9fbc1c7e
Merge remote-tracking branch 'upstream/main' into dev-1.29
2023-11-22 22:07:26 +00:00
421821d5fa
Merge pull request #43563 from yt2985/dev-1.29
...
Add LegacyServiceAccountTokenCleanUp feature in beta
2023-11-22 18:47:18 +01:00
Gergely Nagy