Commit Graph

3209 Commits

Author SHA1 Message Date
Qiming Teng 41955b102a Fix feature gates for v1.29 2023-12-21 20:20:09 +08:00
Kubernetes Prow Robot 60f4e0a186
Merge pull request #43550 from maikokuppe/patch-1
Fix typo in deprecation-guide.md at v1.26
2023-12-21 03:15:08 +01:00
steve-hardman 1c78237b05
Change title and add redirects for kubectl cheatsheet (#43665)
* Change name and add redirects for kubectl cheatsheet

* Change name and add redirects for kubectl cheatsheet

* Change name and add redirects for kubectl cheatsheet
2023-12-21 02:51:00 +01:00
lakshmi e11ca2588c Revise details for sidecar containers 2023-12-20 13:35:29 +05:30
Kubernetes Prow Robot 35c508040e
Merge pull request #44037 from m3nax/patch-1
Updated dotnet - Sample Programs url to point the example folder of project
2023-12-19 14:46:36 +01:00
Kubernetes Prow Robot 3dad3a95fc
Merge pull request #44179 from tengqm/add-annotation
Add few annotations added by the kubelet
2023-12-18 21:03:26 +01:00
Kubernetes Prow Robot 62f2cdf4a7
Merge pull request #44356 from tengqm/kubelet-ref-1.29
Update reference for kubelet 1.29
2023-12-18 03:41:06 +01:00
Kubernetes Prow Robot 4e35cacc55
Merge pull request #44395 from rohan-kapse/patch-8
Add "spec" to glossary
2023-12-18 03:38:14 +01:00
Qiming Teng 8da8c7378c Add a few annotations added by the kubelet
This PR adds some descriptions for the annotations added by the kubelet
to Pods.
2023-12-18 08:21:39 +08:00
Rohan Kapse e9cd56df9e
Update content/en/docs/reference/glossary/spec.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2023-12-17 22:37:34 +05:30
Rohan Kapse d9f7317b44
Create spec.md 2023-12-17 00:22:33 +05:30
Tim Bannister c30baa47f8 Reinstate the MultiCIDRRangeAllocator feature gate
Document MultiCIDRRangeAllocator as a deprecated feature gate.
2023-12-16 13:35:53 +00:00
Kubernetes Prow Robot 6cc6c36751
Merge pull request #44128 from sftim/20231129_service_ip_static_subrange_ga
Remove stale mention of ServiceIPStaticSubrange
2023-12-14 12:45:03 +01:00
Kubernetes Prow Robot 8d7d37e029
Merge pull request #44347 from tengqm/kubeadmref-1.29
Update kubeadm reference for v1.29
2023-12-14 12:33:43 +01:00
Kubernetes Prow Robot 19e5f8c124
Merge pull request #44346 from tengqm/compref-1.29
Update component reference for v1.29
2023-12-14 09:19:28 +01:00
Kubernetes Prow Robot 674448db34
Merge pull request #44349 from tengqm/configapi-1.29
Config API for v1.29
2023-12-14 09:12:39 +01:00
Qiming Teng c01b8a7a2b Update reference for kubelet 1.29
This PR manually syncs the reference for `kubelet`.
2023-12-14 11:50:31 +08:00
Kubernetes Prow Robot e916512655
Merge pull request #44337 from aramase/aramase/d/authN_doc_fix
fix value in structured authn config example
2023-12-14 03:14:04 +01:00
Qiming Teng 2fe79a7c28 Update references to the config APIs 2023-12-14 09:24:12 +08:00
Qiming Teng 7451649920 Updated config API for v1.29 2023-12-14 09:13:20 +08:00
Qiming Teng c4f8b770a0 kubeadm reference for v1.29 2023-12-14 08:52:11 +08:00
Qiming Teng 519eec1bf6 Update component reference for v1.29 2023-12-14 08:49:03 +08:00
Anish Ramasekar fcfeeac989
fix value in structured authn config example
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-12-13 21:43:11 +00:00
Tim Bannister d69dc41fe6 Switch to per-file feature gate descriptions
Replace the feature gate descriptions so that there is a Markdown file
for each feature gate.

Use a shortcode to render a feature gate description. If you use the
shortcode, this also validates that any feature gate you reference
has exactly one descriptive text for the current localization.

Localizations can adopt this new approach piecemeal.

Likely benefits:
- when feature gates are removed from Kubernetes, the localization work
  to do won't require any language skills
- merge conflicts are less likely because the list of feature gates
  becomes just a list of names (descriptions are elsewhere, so changes
  that just affect descriptions won't cause a conflict)
- we'll have a machine-readable list of all the feature gates we
  document, and can compare that to other lists if we want to
- we'll gain a place to add metadata about feature gates. For example,
  this lays groundwork for a future change where we record the KEP
  number (if known) for a feature gate, and can render that where it's
  useful.
2023-12-13 17:38:51 +00:00
Kat Cosgrove bad6aa429e
Update content/en/docs/reference/command-line-tools-reference/feature-gates.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2023-12-13 15:01:03 +00:00
Kensei Nakada 2520994c31
Feature gate SchedulerQueueingHints is disabled by default 2023-12-13 17:45:25 +09:00
Tim Bannister e57cf329a6 Merge 'dev-1.29' with main 2023-12-11 17:11:37 +00:00
Kubernetes Prow Robot 0c5cb411ea
Merge pull request #43871 from neolit123/1.29-add-task-for-kubeadm-generate-csr
kubeadm: add section on how to use the "generate-csr" command
2023-12-11 17:39:47 +01:00
Tim Bannister 0f9c965105 Merge branch 'main' into dev-1.29 2023-12-09 20:20:23 +00:00
Kubernetes Prow Robot f7ead26dbf
Merge pull request #43689 from austince/patch-1
docs: Small fixes to the Resource deletion section of API Concept
2023-12-09 20:53:04 +01:00
Suruchi Kumari 7f8d4ac66f Revert "Implemented a single columned list for the kubernetes metrics reference page (#42823)"
This reverts commit 71cd6ca203.
2023-12-09 17:11:48 +05:30
Kubernetes Prow Robot dd7ee6d1f7
Merge pull request #43853 from syaffers/syaffers-patch-1
Fix minor formatting issue in kubectl docs
2023-12-08 03:54:20 +01:00
Kat Cosgrove 45fb394ca7
Merge main into dev-1.29 to maintain sync 2023-12-07 15:59:56 +00:00
Omer Jonuzi e0e752e19d
Update cheatsheet.md
Corrected description for dumping labeled pod container logs
2023-12-03 22:39:54 +01:00
Kubernetes Prow Robot f6b5c5f735
Merge pull request #44177 from troy0820/troy0820/update-feature-gate-dev-1.29
Document that UnauthenticatedHTTP2DOSMitigation default in 1.29 is set to true
2023-12-03 19:28:35 +01:00
Kubernetes Prow Robot ce56b7a617
Merge pull request #44110 from danwinship/proxy-refactor
clean up iptables/ipvs proxy mode descriptions a bit
2023-12-01 17:50:14 +01:00
Dan Winship d5c530002f Clarify iptables performance slightly 2023-12-01 11:19:41 -05:00
Troy Connor 9795352deb
UnauthenticatedHTTP2DOSMitigation default in 1.29 is set to true
Signed-off-by: Troy Connor <troy0820@users.noreply.github.com>
2023-12-01 10:38:13 -05:00
Dan Winship cf47dab07c Fix redundancy in kube-proxy iptables and ipvs docs
Move the "watches Services and EndpointSlices" and "control loop" text
to the top level, since that applies to all proxy modes. Likewise, the
allegedly iptables-specific graphic is actually sufficiently abstract
to apply to any possible proxy.

Also fix an out-of-date claim about ipvs mode falling back to iptables
mode.
2023-11-30 13:47:49 -05:00
Dipesh Rawat 7d7113d2bf
Add doc for UnauthenticatedHTTP2DOSMitigation feature gate
Signed-off-by: Dipesh Rawat <rawat.dipesh@gmail.com>
2023-11-30 18:20:05 +00:00
Sascha Grunert 8dc08062a7
Link PSS to User Namespaces
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2023-11-30 12:16:59 +01:00
drewhagen deaf1b920a Merge remote-tracking branch 'upstream/main' into dev-1.29 2023-11-29 15:33:49 -06:00
Suruchi Kumari c0a72d25d8
added doc for setting up cloud provider kubectl auth via plugin
Signed-off-by: GitHub <noreply@github.com>
2023-11-29 13:26:04 +00:00
Tim Bannister 387192d95f Fix style nits
Update “Virtual IPs and Service Proxies” to align better with our style
guide and SIG conventions.
2023-11-29 10:57:02 +00:00
Tim Bannister 1ea312d31e Revise docs for API tracking of IP address assignment 2023-11-29 10:57:01 +00:00
Tim Bannister 624f5f8d1f Remove stale mention of ServiceIPStaticSubrange
This feature gate is GA; you can't disable it.
2023-11-29 00:40:02 +00:00
Kubernetes Prow Robot 0401617bc5
Merge pull request #43469 from aojea/placeholder_kep1880
KEP-1880 Multiple ServiceCIDR
2023-11-29 01:25:00 +01:00
Antonio Ojea dff94b84bc KEP-1880 Multiple ServiceCIDR 2023-11-29 00:19:38 +00:00
Sunny Song 058e522b63 Update Based on Comments - Nov 28 2023-11-28 15:50:25 -08:00
Kubernetes Prow Robot 8a29190fa6
Merge pull request #43803 from kinvolk/dev-1.29-user-namespaces-pss
[KEP-127] Add documentation about user namespaces and PSS
2023-11-28 23:46:29 +01:00
Kubernetes Prow Robot 398961aa11
Merge pull request #43749 from liggitt/deprecated-1-29
Add 1.32 removal info for v1beta3 flowcontrol API
2023-11-28 18:55:29 +01:00
Sascha Grunert 4e156c738d
Add documentation about user namespaces and PSS
Adding required documentation for
[KEP-127](https://github.com/kubernetes/enhancements/issues/127).

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-11-28 11:41:13 +01:00
Kubernetes Prow Robot 8ff7614864
Merge pull request #43348 from HirazawaUi/add-DisableNodeKubeProxyVersion-feature-gate
Document Pod .status.nodeInfo.kubeProxyVersion deprecation
2023-11-28 10:35:01 +01:00
Kubernetes Prow Robot 7c2f5c4583
Merge pull request #43397 from aramase/aramase/d/kep_3331_v1alpha1_docs_v1.29
add docs for StructuredAuthenticationConfig v1alpha1
2023-11-28 09:47:41 +01:00
Dan Winship d6f07783e1 Remove description of how iptables kube-proxy differs from userspace
The iptables kube-proxy documentation notes that it has "lower system
overhead", but doesn't mention what it's lower than; it's talking
about the userspace proxy, which no longer exists, and which no
current documentation readers would think to compare the iptables
proxy mode to.

Likewise, there is no point in explaining how iptables mode endpoint
selection differs from userspace mode endpoint selection, because the
iptables mode behaves in the way that everyone would consider normal.
It was the userspace proxy that was weird, and so we had to document
the *change* in behavior when we introduced the iptables proxy, but
there's no reason to keep documenting "we don't do something you
wouldn't have expected us to do" now.
2023-11-27 15:33:58 -05:00
Anish Ramasekar 74caa0daaa
review feedback
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-11-27 20:03:23 +00:00
Kubernetes Prow Robot d5466c35ce
Merge pull request #43588 from danwinship/kep-3866-nftables-proxy-alpha
Document nftables kube-proxy alpha (KEP 3866)
2023-11-27 18:35:09 +01:00
Dan Winship 75e93c6c23 Document the nftables kube-proxy mode. 2023-11-27 12:07:34 -05:00
Kubernetes Prow Robot a3a466610b
Merge pull request #43448 from wzshiming/kep-2681
[KEP-2681] Docs update for Beta PodHostIPs
2023-11-27 16:13:46 +01:00
Kubernetes Prow Robot 4a17ee3c73
Merge pull request #43533 from charles-chenzz/dev-1.29
update docs to promote PodReadyToStartContainersCondition into beta
2023-11-27 16:06:57 +01:00
Kubernetes Prow Robot cb04844a32
Merge pull request #44028 from kiashok/docs-kep4216-dev1.29
[dev-1.29] Add docs for KEP 4216: Image pull per runtime class
2023-11-27 15:20:13 +01:00
Kubernetes Prow Robot 123973c2e8
Merge pull request #41892 from palnabarun/authz-config-docs
Add docs for Authorization Configuration
2023-11-27 13:59:40 +01:00
Nabarun Pal 21ac70ee24
Wrap markdown text
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-11-27 16:16:40 +05:30
Kubernetes Prow Robot 8ff9e805b6
Merge pull request #43555 from atosatto/tec-dev-1.29
Docs for Decoupled TaintManager from NodeLifeCycleController (KEP-3902)
2023-11-27 00:04:15 +01:00
Kirtana Ashok edddb55b7a KEP 4216: Doc changes for image pull per runtime class
Signed-off-by: Kirtana Ashok <kiashok@microsoft.com>
(cherry picked from commit 10a984d1ed)
Signed-off-by: Kirtana Ashok <kiashok@microsoft.com>
2023-11-26 14:05:29 -08:00
Kubernetes Prow Robot da5638ce17
Merge pull request #43417 from chrishenzie/readwriteoncepod-ga
Graduate ReadWriteOncePod to GA
2023-11-25 17:50:31 +01:00
Nabarun Pal 03e2976d90
Add more context to downgrade example
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-11-24 12:03:35 +05:30
Kat Cosgrove 2d9fbc1c7e
Merge remote-tracking branch 'upstream/main' into dev-1.29 2023-11-22 22:07:26 +00:00
Kubernetes Prow Robot 421821d5fa
Merge pull request #43563 from yt2985/dev-1.29
Add LegacyServiceAccountTokenCleanUp feature in beta
2023-11-22 18:47:18 +01:00
Manuel Menegazzo cc7ff286e3
Update dotnet client sample program url
Change the url to sample program from the "Simple" project to the example folder.
2023-11-22 16:01:28 +01:00
Lubomir I. Ivanov d174742c46 kubeadm: add section on how to use the "generate-csr" command
The "generate-csr" command is useful in cases users don't
wish to use the default certificate duration that kubeadm has
hardcoded to 1 year. The command can also be used when the
certificate rotation process is done manually, out of bounds
with an external CA.
2023-11-22 08:32:30 +02:00
Nabarun Pal 10568634b5
Update from code review
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-11-22 10:22:33 +05:30
Shiming Zhang fdf935bf57 Docs update for Beta PodHostIPs 2023-11-22 09:40:45 +08:00
Kubernetes Prow Robot 847d6c2b98
Merge pull request #44024 from jiahongli18/patch-1
Add missing punctuation in server side apply page
2023-11-22 02:17:49 +01:00
Kubernetes Prow Robot 99df3a3bb8
Merge pull request #43600 from ahmedtd/ctb-projection
ClusterTrustBundles: document projected volumes
2023-11-22 00:08:58 +01:00
Andrea Tosatto 394db549ac Decouple TaintManager from NodeLifeCycleController (KEP-3902) 2023-11-21 19:37:34 +00:00
Anish Ramasekar 01e6f317e3
add docs for StructuredAuthenticationConfig v1alpha1
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-11-21 19:28:05 +00:00
Chris Henzie c07ce392e4 Graduate ReadWriteOncePod to GA
Included is a task for migrating existing PersistentVolumes to use
ReadWriteOncePod, taken from the alpha blog post.
2023-11-21 09:35:09 -08:00
Taahir Ahmed 6dd3091e55 ClusterTrustBundles: Document projected volumes 2023-11-21 09:22:39 -08:00
chansuke 244c6353bd Improve documentation for `kubernetes.io/enforce-mountable-secrets` annotation on `ServiceAccount` 2023-11-22 00:46:34 +09:00
Jack 988a47d384
Add missing punctuation 2023-11-21 09:54:42 -05:00
Kubernetes Prow Robot 92a8fce75d
Merge pull request #43398 from aramase/aramase/d/kep_3299_stable_doc_update
[KMSv2] add docs for KMSv2 GA
2023-11-21 11:46:23 +01:00
Kubernetes Prow Robot 9681b5dc54
Merge pull request #43999 from Princesso/merged-main-dev-1.29
Merged main branch into dev 1.29 branch
2023-11-20 20:15:07 +01:00
Anish Ramasekar 8b9f3f84aa
review feedback
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-11-20 17:25:48 +00:00
Kensei Nakada 2ec25fbe7b
add: the doc for matchLabelKeys/mismatchLabelKeys in pod (anti)affinity (#43812)
* add: the doc for matchLabelKeys/mismatchLabelKeys in pod (anti)affinity

* fix based on reviews

* add the explanation for labelSelector

* address the review
2023-11-20 15:04:59 +01:00
Nabarun Pal 5627db2720
add documentation for AuthorizationConfiguration
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-11-20 08:58:49 +05:30
steve-hardman e4f8dab1aa
Remove archived third-party client library (#43960)
* Remove archived lib

* Remove archived lib

Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>

---------

Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
2023-11-20 01:18:38 +01:00
Oluebube Princes Egbuna f893a19ee6 Resolved merge conflict when merging main into dev-1.29 branch 2023-11-19 16:02:40 +01:00
Kubernetes Prow Robot b8b45ee9c9
Merge pull request #43620 from seans3/kep-4006-docs
Document Kubernetes' use of WebSockets (replacement for SPDY / KEP 4006)
2023-11-18 12:05:17 +01:00
Anish Ramasekar 8598729e5d
update docs for KMSv2 and KMSv2KDF stable
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-11-17 18:19:45 +00:00
Kubernetes Prow Robot 43c7d05eb9
Merge pull request #43958 from enj/enj/d/sa_node_ref
KEP-4193: bound service account token improvements
2023-11-17 15:49:05 +01:00
Kubernetes Prow Robot 301fccd571
Merge pull request #43778 from logicalhan/inst-docs
update documented metrics for v1.29
2023-11-17 15:28:59 +01:00
windsonsea 676f862137 Clean up /access-authn-authz/authentication.md 2023-11-17 21:32:04 +08:00
Kubernetes Prow Robot 906bfb0fa9
Merge pull request #43601 from tengqm/fg-nodeport-range
Fix feature gate for a gate that is not documented
2023-11-17 10:14:08 +01:00
tinatingyu bcb527b5be Add LegacyServiceAccountTokenCleanUp feature to beta 2023-11-16 17:21:26 +00:00
Monis Khan 42c9e4e20f
KEP-4193: bound service account token improvements
Signed-off-by: Monis Khan <mok@microsoft.com>
2023-11-16 08:48:59 -05:00
Kubernetes Prow Robot cfbe80de55
Merge pull request #43441 from cici37/2876-1.29
[KEP-2876] Document (GA) CEL validation for custom resources
2023-11-16 05:31:45 +01:00
Cici Huang 16fb2e68c6 Promote CRD validation rules to GA 2023-11-15 23:19:55 +00:00
Kubernetes Prow Robot 7899eb09a3
Merge pull request #43938 from katcosgrove/merged-main-dev-1.29
Merge main into dev-1.29
2023-11-15 17:47:53 +01:00
Matthias Bertschy 8f7cfdbf9c
modifying docs for SidecarContainers beta graduation (#43471)
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
2023-11-15 08:21:56 +08:00