Commit Graph

240 Commits

Author SHA1 Message Date
Kubernetes Prow Robot da14ff8f59
Merge pull request #43176 from sftim/20230923_revise_security_concept_section
Move and revise overview for Security section
2024-02-16 11:41:30 -08:00
Tim Bannister 9323995f01 Add note to localizers 2024-02-16 11:47:37 +00:00
Tim Bannister 892978919f Move cloud native security out of section overview 2024-02-16 11:47:24 +00:00
Tim Bannister 18cdba2449 Remove legacy security overview page 2024-02-16 11:43:53 +00:00
Tim Bannister 872808b895 Add section overview for Security
Co-authored-by: Anshuman Tripathi <anshuman.tripathi305@gmail.com>
Co-authored-by: Anuj Tiwari <aj11anuj123@gmail.com>
Co-authored-by: Gaurav Padam <1032201077@tcetmumbai.in>
Co-authored-by: Tabitha Sable <51767484+tabbysable@users.noreply.github.com>
2024-02-16 11:43:31 +00:00
John Reese 4a3d9e433a
Update rbac-good-practices.md
Fix typos on page "Role Based Access Control Good Practices"
2024-01-30 13:58:54 -05:00
Kubernetes Prow Robot a64b2324c7
Merge pull request #42355 from deepak4566/Deepak-1
Remove API server --enable-logs-handler argument from docs
2024-01-09 16:52:58 +01:00
hunshcn bcc55ae7c9
fix outdated link/anchor
Signed-off-by: hunshcn <hunsh.cn@gmail.com>
2024-01-03 15:00:11 +08:00
Kubernetes Prow Robot e2509cb624
Merge pull request #44506 from Takashiidobe/fix-typos
fix typos
2024-01-02 19:29:55 +01:00
hunshcn fc8e79b96c
update safe sysctl
Signed-off-by: hunshcn <hunsh.cn@gmail.com>
2023-12-25 10:47:54 +08:00
Takashiidobe d536e46dbd fix typos 2023-12-24 21:00:53 -05:00
Kat Cosgrove 45fb394ca7
Merge main into dev-1.29 to maintain sync 2023-12-07 15:59:56 +00:00
hunshcn bb2cb5fa86
update sysctl-cluster.md, pod-security-standards.md
Signed-off-by: hunshcn <hunsh.cn@gmail.com>
2023-12-01 14:47:36 +08:00
Sascha Grunert 8dc08062a7
Link PSS to User Namespaces
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2023-11-30 12:16:59 +01:00
Kat Cosgrove 2d9fbc1c7e
Merge remote-tracking branch 'upstream/main' into dev-1.29 2023-11-22 22:07:26 +00:00
chansuke 244c6353bd Improve documentation for `kubernetes.io/enforce-mountable-secrets` annotation on `ServiceAccount` 2023-11-22 00:46:34 +09:00
Oluebube Princes Egbuna f893a19ee6 Resolved merge conflict when merging main into dev-1.29 branch 2023-11-19 16:02:40 +01:00
Monis Khan 42c9e4e20f
KEP-4193: bound service account token improvements
Signed-off-by: Monis Khan <mok@microsoft.com>
2023-11-16 08:48:59 -05:00
yanggang 5f3f34b39b
Fix some typos in [en] docs.
Signed-off-by: yanggang <gang.yang@daocloud.io>
2023-11-16 00:35:39 +00:00
Kubernetes Prow Robot 430dad213e
Merge pull request #42486 from raesene/main
Kubernetes Hardening Guide Section on Authentication Mechanisms
2023-09-18 10:22:31 -07:00
SomPandey 0e9e6affd3 fix broken link 2023-09-07 16:47:01 +05:30
MeenuyD 1a3cf0a7fa
Change text in Pod Security Admission metrics (#42856)
* Change text in Pod Security Admission metrics

* remove changes from the metrics.md file
2023-09-03 13:05:47 -07:00
Kubernetes Prow Robot bf75860f4d
Merge pull request #41814 from ugur99/ugur-develop
List metrics that relate to Pod security admission
2023-09-03 10:19:46 -07:00
Rory McCune 8ed2edd0e2 change serviceaccount wording 2023-08-27 09:31:11 +01:00
Rory McCune 076c879c70
Update content/en/docs/concepts/security/hardening-guide/authentication-mechanisms.md
Co-authored-by: Qiming Teng <tengqm@outlook.com>
2023-08-27 09:28:51 +01:00
Arhell 5f17fd8fb3 [en] typo secrets-good-practices.md 2023-08-22 03:07:58 +03:00
Dudi Varaprasad eee06d1b81
Add whitespace into “Good practices for Kubernetes Secrets” (#42650)
* Update secrets-good-practices.md

changed caution as per docs 
https://kubernetes.io/docs/contribute/style/style-guide/#caution

* Update secrets-good-practices.md

added spaces as per style guide https://kubernetes.io/docs/contribute/style/style-guide/#caution
2023-08-20 19:33:22 -07:00
Rory McCune 0761ef8e19
Update content/en/docs/concepts/security/hardening-guide/authentication-mechanisms.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2023-08-19 18:28:41 +01:00
Rory McCune 3dd0bd16ba sentence case, wrapping and fixes from comments 2023-08-19 15:37:26 +01:00
Rory McCune 1e7a4eb633 Initial commit of Draft Kubernetes Hardening Guide Section on Authentication Mechanisms 2023-08-10 13:39:03 +01:00
Deepak fd6648f165
removed( enable log handling) command and its content 2023-08-02 19:28:38 +05:30
Deepak bae7a10d64
attached correct link to the documentation 2023-08-02 18:54:14 +05:30
windsonsea ca08498f33 Provide a consistent appearance to bullets 2023-07-25 09:23:22 +08:00
Marcelo Giles 3581bb036d
Reword seccomp paragraph to remove alpha feature reference
Fix capitalization
2023-07-09 09:46:29 -07:00
Ugur b773649fb2 improvement psa document fix
Signed-off-by: Ugur <ugurozturk918@gmail.com>
2023-06-30 16:20:31 +02:00
Ugur 26f72a7358 improvement psa document
Signed-off-by: Ugur <ugurozturk918@gmail.com>
2023-06-30 13:09:21 +02:00
Michael 49135cefb8 Tweak line wrappings in /services-networking/ingress.md 2023-06-01 21:38:11 +08:00
Kubernetes Prow Robot 821ca22ac1
Merge pull request #40915 from mrgiles/37738_securing_cluster_checklist_align
Add links between Securing a Cluster and Security Checklist for alignment
2023-05-15 13:45:34 -07:00
Kubernetes Prow Robot eb7c049f04
Merge pull request #40376 from dtzar/patch-1
clarify Windows privileged containers feature enablement
2023-05-07 03:51:16 -07:00
niranjandarshann 057766eed7 updated link 2023-05-02 00:35:47 +05:30
Marcelo Giles 19a3dc0f6f
Add links between securing cluster and security checklist 2023-04-30 23:28:52 -07:00
niranjandarshann d8a6fd602c fixed broken link 2023-04-28 22:39:33 +05:30
David Tesar 8f3790c3a9
clarify Windows privileged containers feature enablement 2023-04-07 10:50:25 -07:00
Kubernetes Prow Robot 7b7fa2c8ec
Merge pull request #38874 from sftim/20230110_add_logs_api_to_security_checklist
Add /logs API to security checklist
2023-04-03 08:31:51 -07:00
Hiroki Takatsuka 47319756be
fix links in service-accounts.md 2023-03-28 14:48:04 +09:00
Shubham 458c0e3b26
Improvement: Added the Note for External applications. (#39691)
* Improvement: Added the word External applications.

* Added the Note for External Applications.

* Modify the note
2023-03-21 20:08:36 -07:00
Tim Bannister 52bb8f9282 Add /logs API to security checklist
It's best to disable this API, which is deprecated at the time of
writing.

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2023-03-16 17:38:38 +00:00
Kubernetes Prow Robot da84dd8419
Merge pull request #39436 from sftim/20230213_tweak_sa_concept
Fix wording, punctuation and Markdown for ServiceAccount concept page
2023-02-14 15:53:41 -08:00
Kubernetes Prow Robot ee4b88ed37
Merge pull request #37733 from sftim/20221105_update_docs_podsecuritypolicy_removal
Update documentation for PodSecurityPolicy removal
2023-02-14 12:55:51 -08:00
Tim Bannister 96d49317a2
Fix wording for ServiceAccount concept
Co-authored-by: Qiming Teng <tengqm@outlook.com>
Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
2023-02-14 09:17:03 +00:00