Commit Graph

894 Commits

Author SHA1 Message Date
Nate W f85be125b9 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-03-31 15:18:13 -07:00
Kubernetes Prow Robot 8a614ca171
Merge pull request #32668 from tengqm/LeaderMigration-ga
ControllerLeaderMigration is GA
2022-03-31 14:45:05 -07:00
Qiming Teng f3a06f432a ControllerLeaderMigration is GA 2022-03-31 09:03:57 +08:00
Kubernetes Prow Robot 59baf2fff2
Merge pull request #32661 from guettli/patch-5
typo: "the" --> "then"
2022-03-30 17:43:00 -07:00
Tim Bannister 83514e6dc1
Tweak page introduction
Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
2022-03-30 23:15:09 +01:00
Kubernetes Prow Robot 226abdf52d
Merge pull request #32666 from sftim/20220330_fixup_cri-dockerd_task
Fixup incorrect systemctl command
2022-03-30 14:53:57 -07:00
Kubernetes Prow Robot 2258bc2308
Merge pull request #32637 from guettli/patch-4
Link to Guaranteed pods
2022-03-30 14:51:57 -07:00
Tim Bannister 3cb2b0cb14
Fixup incorrect systemctl command
The subcommand for restart is "restart"
2022-03-30 22:26:12 +01:00
Tim Bannister b9a7ec6f35
Update cri-dockerd switchover docs for v1.24 2022-03-30 22:18:56 +01:00
Shannon Kularathna 5edbf56ec5 Add draft content for migrating to dockerd 2022-03-30 22:12:19 +01:00
Kubernetes Prow Robot 994f5c5a48
Merge pull request #32131 from shannonxtreme/dockershim-migrate-dockerd
Add content for migrating to cri-dockerd
2022-03-30 14:09:57 -07:00
Thomas Güttler 8df0736acb
typo: "the" --> "then"
fixed typo
2022-03-30 21:03:48 +02:00
Thomas Güttler 998d762331 S/'Guaranteed'/Guaranteed 2022-03-30 20:52:00 +02:00
Thomas Güttler 16ae848701 Link to 'Guaranteed' pods.
related to #32619
2022-03-30 20:52:00 +02:00
Tim Bannister 672813f3e7
Move PSP into Security concepts section
The logical navigation definitely works better if Pod Security admission
and PodSecurityPolicy are pages in the same section. Make It So.

Co-authored-by: Rey Lejano <rlejano@gmail.com>
2022-03-30 17:30:35 +01:00
Geoffrey Cline 67c5034165
Apply suggestions from code review
Co-authored-by: Qiming Teng <tengqm@outlook.com>
2022-03-28 12:27:33 -05:00
Nate W 7c67921f3f Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-03-28 08:48:23 -07:00
Kubernetes Prow Robot b68cfbd60a
Merge pull request #32485 from tengqm/fix-ip-masq-agent
Fix the ip-masq-agent page
2022-03-26 13:21:21 -07:00
Kubernetes Prow Robot 39fd63ba12
Merge pull request #31989 from guettli/31930__fix_busybox_image_1.28
fix busybox image to version 1.28
2022-03-25 15:45:59 -07:00
Kubernetes Prow Robot 6da9c34b2e
Merge pull request #31799 from SergeyKanzhelev/dynamicKubeletConfig
Dynamic kubelet config is removed
2022-03-25 15:27:58 -07:00
Shannon Kularathna 180fa82d9c Add draft content for migrating to dockerd 2022-03-25 15:19:17 +00:00
Qiming Teng 3b21d5bc69 Fix the ip-masq-agent page 2022-03-25 14:02:40 +08:00
Kubernetes Prow Robot 6a47224fe0
Merge pull request #32258 from tengqm/fix-links-2
Fix links in the change PV reclaim policy page
2022-03-22 15:19:58 -07:00
Geoffrey Cline 4492fc5766 add steps for coredns permissions 2022-03-18 17:00:38 -05:00
Nate W 0289b52eca Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-03-16 11:38:29 -07:00
Qiming Teng cce96ae367 Migrate access cluster service page
The acess-cluster-service page, has nothing to do with administering a cluster.
A better home for this page should be the `/docs/tasks/access-application-cluster` subdirectory instead.
2022-03-16 16:45:10 +08:00
Qiming Teng a11ecef6f1 Wrap long lines and fix a few nits in the text 2022-03-14 20:36:51 +08:00
Qiming Teng 06f35a55d5 Fix link to use relative path 2022-03-14 20:29:23 +08:00
Qiming Teng e9a8cc6eda Reformat the indentation of lists and sample outputs 2022-03-14 20:22:22 +08:00
Qiming Teng f1575f40c2 Fix link in change PV reclaim policy page 2022-03-14 20:20:04 +08:00
Qiming Teng 29f5e89770 Reformat the node local DNS cache page 2022-03-11 11:15:47 +08:00
Kubernetes Prow Robot 782d8bc2c9
Merge pull request #32126 from tengqm/update-coredns
Improve coredns page
2022-03-09 08:40:13 -08:00
Qiming Teng 15f643e5e8 Improve coredns page
This PR refactors the coredns page by removing some outdated statements.
2022-03-09 21:31:10 +08:00
Nate W 5a0f2583c6 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-03-07 16:23:45 -08:00
Kubernetes Prow Robot a26ac80b38
Merge pull request #31816 from voelzmo/patch-2
Update proposal link to point to archive
2022-03-07 14:36:25 -08:00
Kubernetes Prow Robot f4a81795e5
Merge pull request #32070 from yuvraj9/patch-1
Fixing typo error
2022-03-06 20:46:53 -08:00
Yuvraj Shekhawat d884ce7ce0
Fixing typo error 2022-03-06 02:49:14 +05:30
Tim Bannister 73cd38cdc6 Move kubectl overview to be section index
Also:
- use glossary definition in page introduction
- tidy broken link in What's Next section
- update links to refer to moved page
2022-03-03 10:03:00 +00:00
Kubernetes Prow Robot b6643f3d51
Merge pull request #31593 from ctalledo/k8s-in-sysbox
Add Sysbox as an option to run kubernetes inside unprivileged containers or pods.
2022-03-02 18:30:46 -08:00
Thomas Guettler 7122a4498a fix busybox image to 1.28 (issues with `nslookup`).
Changes where done with these commands:

reprec 'image: busybox(?!:)' 'image: busybox:1.28' */docs */examples
reprec -- '--image=busybox(?!:)' '--image=busybox:1.28' */docs */examples

Related issues:

 https://github.com/docker-library/busybox/issues/48
 https://github.com/kubernetes/kubernetes/issues/66924
2022-03-02 20:48:26 +01:00
RA489 7f9869dab8 kubeadm-upgrade: add note about verifying the kubelet service status 2022-03-02 08:20:04 +05:30
Kubernetes Prow Robot ee0389d360
Merge pull request #28290 from shannonxtreme/api-eviction
Add information to API Evictions from Safely Drain a Node
2022-02-28 19:25:46 -08:00
Nate W b7f8b0daae Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-02-28 16:18:31 -08:00
Kubernetes Prow Robot d2a2af28ea
Merge pull request #31721 from mac-chaffee/main
Add upgrade notes to cpu-management-policies
2022-02-27 17:20:55 -08:00
mango 288a7aded9
docs: add etcd cluster upgrade guide to configure-upgrade-etcd (#31833)
* docs: add etcd cluster upgrade guide to configure-upgrade-etcd

* Update content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md

Co-authored-by: championshuttler <shivams2799@gmail.com>

* Update content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md

Co-authored-by: Rey Lejano <rlejano@gmail.com>

* put "For more details..."

* Update configure-upgrade-etcd.md

Co-authored-by: championshuttler <shivams2799@gmail.com>
Co-authored-by: Rey Lejano <rlejano@gmail.com>
2022-02-27 17:04:56 -08:00
Mac Chaffee d657a0d10a
Add upgrade notes to cpu-mgt-policies
Signed-off-by: Mac Chaffee <machaffe@renci.org>
2022-02-25 18:49:11 -05:00
Sergey Kanzhelev 152ccdae91 Dynamic Kubelet Configuration feature is removed 2022-02-25 07:09:20 +00:00
Kubernetes Prow Robot 9de083393a
Merge pull request #31845 from liggitt/manual-token
Stop recommending people scrape auto-generated service account tokens
2022-02-24 09:46:31 -08:00
Jordan Liggitt 3d15ef3810 Stop recommending people scrape auto-generated service account tokens 2022-02-23 13:28:02 -05:00
Aayush Sharma 27caffcbf0 fixed typo 2022-02-23 16:53:10 +05:30
Kubernetes Prow Robot 683fc53b84
Merge pull request #31687 from neolit123/1.24-update-legacy-kubelet-cm-refs
kubeadm: update legacy kubelet config map information and document feature gates
2022-02-22 02:49:46 -08:00
Nate W e8b19637df Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-02-21 10:36:03 -08:00
Marco Voelz 9823ecda09
Update proposal link to point to archive
Original link says
```
Design proposals have been archived.

To view the last version of this document, see the Design Proposals Archive Repo.

Please remove after 2022-04-01 or the release of Kubernetes 1.24, whichever comes first.
```
2022-02-21 10:54:50 +01:00
Tim Bannister 362da74120
Update links to Dockershim Removal FAQ
- Identify selected links to the Dockershim Deprecation FAQ
- Replace them with links to the updated FAQ
2022-02-17 17:41:55 +00:00
Lubomir I. Ivanov 26f6a21308 kubeadm: remove mentions of the the legacy kubelet-config-x.yy
The default kubelet configuration ConfigMap that kubeadm manages
is "kubelet-config" instead of "kubelet-config-x.yy" (where x.yy
is the Kubernetes version) in 1.24.

Cleanup references to the legacy naming in kubeadm documentation.

Generated contents in content/en/docs/reference/* are not updated.
2022-02-17 18:27:48 +02:00
Nate W 8b9e77db12 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-02-15 08:28:12 -08:00
srout deb2a9c96b
Update memory-default-namespace.md 2022-02-14 13:05:33 +05:30
Kubernetes Prow Robot 7dd728cf69
Merge pull request #31729 from SWADESNA/patch-1
Update memory-default-namespace.md
2022-02-13 23:25:28 -08:00
Kubernetes Prow Robot 1f4ca9f802
Merge pull request #31631 from tengqm/fix-gc-cascade
Fix the cascading deletion page
2022-02-13 23:09:28 -08:00
srout a191d71627
Update memory-default-namespace.md 2022-02-14 12:37:58 +05:30
Kubernetes Prow Robot 4727e39e70
Merge pull request #31682 from tengqm/apiserver-encryption-v1
Add configuration reference for API server encryption
2022-02-12 20:45:46 -08:00
Debabrata Panigrahi b03dfa8096
Docs to change Container runtime (#30141)
* Docs to change Container runtime

* Updated header

* Updated header

* Few changes made according to the reviews

* Updated few headings

* Updated few markdown changes

* Reverted a unwanted changes

* Removed the double extension in the filename

* Updated

* Updated according to review

* Final Updates

* Added instructions to remove docker engine

* Minor changes

* Minor updates on heading

* Minor updates on lists

* Minor updates on line 106

* Minor updates on line 106
2022-02-11 04:38:03 -08:00
Qiming Teng 3e58334b07 Add configuration reference for API server encryption 2022-02-10 11:27:52 +08:00
Qiming Teng d4f6e0be55 Fix the cascading deletion page
This PR fixes two problems in the cascading deletion page:

- The indentation of list items should be 2 spaces for unordered lists,
  or 3 spaces for ordered lists. We should avoid using 4 spaces as
  indentation because 4-spaces indentation has special meaning in
  markdown.
- The garbage-collection page was moved to a new place. With redirect
  records for English site, there seems no obvious problems. However,
  for localization teams, such redirection records don't exist. It is
  super easy to create a dangling link in localized pages.
2022-02-10 10:38:01 +08:00
Kubernetes Prow Robot 58fb4c2f83
Merge pull request #31572 from Nordix/multi-numa-doc
Update doc for reserved memory flag
2022-02-08 20:26:17 -08:00
Kubernetes Prow Robot 71389e6293
Merge pull request #31604 from neolit123/1.24-add-example-for-kubeconfig-user
kubeadm: add missing guide for "kubeconfig user"
2022-02-08 20:24:17 -08:00
Nate W f9dda7bc96 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-02-07 11:03:19 -08:00
Ravindra Thakur f38c09fa6a Update doc for reserved memory flag
This change is to update the documentation for reserved-memory flag.
Now, for specifying memory reservations across multiple NUMA nodes,
semicolon needs to be used as separator.

Signed-off-by: Ravindra Thakur <ravindra.nath.thakur@est.tech>
2022-02-07 18:58:37 +05:30
Arhell af7a9a515c [en] add comma 2022-02-04 01:47:35 +02:00
Lubomir I. Ivanov 75a33b2650 kubeadm: add missing guide for "kubeconfig user"
The command "kubeadm kubeconfig user" is missing
some examples and more details on why it is needed.

- Add a new section "Generating kubeconfig files
for additional users" under the kubeadm-certs page.
- Link to this section from the kubeadm-kubeconfig reference page.
- Link to this section from the create-cluster-kubeadm page.
2022-02-02 21:41:40 +02:00
Cesar Talledo 021f8be65b Add Sysbox as an option to run kubernetes inside unprivileged containers or pods.
Sysbox is an open-source container runtime (similar to "runc") that supports
running VM-workloads such as Docker and Kubernetes inside unprivileged
containers or pods.

Sysbox containers always use the Linux user-namespace for isolation, plus
specially crafted proc and sys filesystems, some syscall interception,
filesystem ID-mapping, and more.

It's possible to run Kubernetes, K3s, K0s, inside containers or pods deployed
with Sysbox. This commit aims to make the Kubernetes community aware of this
option.

Signed-off-by: Cesar Talledo <ctalledo@nestybox.com>
2022-02-01 19:38:10 +00:00
Kubernetes Prow Robot f53f7e9203
Merge pull request #31387 from avoidik/patch-2
Update encrypt-data.md - multi-master configuration notice
2022-02-01 05:48:18 -08:00
Viacheslav Vasilyev 241e635197
Update content/en/docs/tasks/administer-cluster/encrypt-data.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2022-02-01 15:31:21 +02:00
Viacheslav Vasilyev ddd4a3defb
Update content/en/docs/tasks/administer-cluster/encrypt-data.md
Co-authored-by: Jim Angel <jimangel@users.noreply.github.com>
2022-02-01 12:38:35 +02:00
Kubernetes Prow Robot 48401482bc
Merge pull request #31571 from prameshj/patch-8
Add a section about nodelocaldns memory limits.
2022-01-31 15:43:53 -08:00
Nate W 2fa88c51b6 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-01-31 11:57:45 -08:00
Kubernetes Prow Robot b2063eedeb
Merge pull request #31546 from chrisnegus/remove-docker-cgroup-reference
Change docker cgroup driver example to containerd
2022-01-31 10:00:23 -08:00
Kubernetes Prow Robot f8db38b98d
Merge pull request #30066 from sftim/20211012_tidy_manage_resources_tasks
Tidy task pages within Manage Memory, CPU, and API Resources
2022-01-31 07:58:23 -08:00
prameshj 9b0539eeb5 Incorporate review comments.
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>
2022-01-31 07:50:54 -08:00
prameshj 1b469285e8
Add a section about nodelocaldns memory limits. 2022-01-30 21:10:40 -08:00
AugustasV 80f4c27c66
correction
Signed-off-by: AugustasV <reg1nt1z@gmail.com>
2022-01-30 21:49:09 +01:00
Augustas 3bdfba74ed
Apply suggestions from code review
Thank you sftim for recommended changes.

Co-authored-by: Tim Bannister <tim@scalefactory.com>
2022-01-30 21:37:06 +01:00
Christopher Negus 976004b957 Change docker cgroup driver example to containerd 2022-01-27 22:05:02 +00:00
Kubernetes Prow Robot 5e35828808
Merge pull request #31309 from neolit123/1.24-update-kubeadm-docs-for-dockershim
kubeadm: adapt docs for 1.24 and dockershim removal
2022-01-25 08:44:32 -08:00
Lubomir I. Ivanov 3184c227c7 kubeadm: adapt docs for 1.24 and dockershim removal
Touch the following files:
- Implementation details: remove docker specifics, which is changing
in 1.24
- Create cluster: small language cleanup, remove note about 1.24
- Install kubeadm: Include two up-to-date tables for Linux / Windows
with known endpoints. Include cri-dockerd.
- Kubelet integration: (side cleanup) use "container runtime" instead of
"CRI runtime" (which is incorrect). Mention that only updating
"--container-runtime-endpoint=.." is required if the user wishes
to override the CR on a certain host. Dockershim->CR-foo migration
guides would make the "--container-runtime=remote" flag explicit
and we want to remove it at some point.
- Troubleshooting kubeadm: Remove some instances of Docker troubleshooting
that imply docker as default CR, or talk about old Docker versions.
Be more generic about container runtimes.
- Adding Windows nodes: move the containerd tab before the Docker
tab, as containerd is now the default. Remove note about being explicit
about --cri-socket. Add note that crictl is required for both
Docker and containerd. Add note that cri-dockerd is required if
the user wants to use Docker EE on Windows.
2022-01-25 18:35:58 +02:00
AugustasV e0eb75215b
why_telemetery_agents_talk
Signed-off-by: AugustasV <reg1nt1z@gmail.com>
2022-01-22 22:42:49 +01:00
Viacheslav Vasilyev 0ef0c8d570
Update encrypt-data.md - multi-master configuration notice
Add short notice about multi-cluster configurations
2022-01-18 12:40:37 +02:00
Lubomir I. Ivanov b00ffa2093 kubeadm-upgrade: adjust note about node drain
The current entry under additional information about drain can
be confusing and users might jump into draining the nodes before
the upgrade steps (as a pre-req), following the
instructions in the external link. This is not accurate.

Adjust the entry text to explain that drain is a step as part of
the upgrade process and this additional information entry just
mentions why it is needed.
2022-01-13 15:36:30 +02:00
Wang 02dc4a258a
Update migrating-telemetry-and-security-agents.md 2022-01-12 22:17:55 +09:00
Qiming Teng 83323d428d Reformat the memory-manager page
This commit reformats the memory manager page:

- convert the page from DOS to UNIX format;
- wrap long lines where appropriate for ease of change tracking;
- remove useless trailing spaces and empty lines.

This commit contains **NO** changes to the text itself.
2022-01-03 11:36:37 +08:00
Qiming Teng c1783b4b71 Tune memory manager page
This PR fixes the memory manager page by:

- removing links to non-existent sections;
- fixing links with bad anchors;
- fixing incorrect language tag for code snippets
2022-01-03 11:28:41 +08:00
Clément Nussbaumer 65eaccecf5
remove kubeler-rubber-stamp
Due to it not being compatible with K8s 1.22 anymore and not being maintained either
2021-12-20 14:10:13 +01:00
Clément Nussbaumer 3e839ef963
docs: add link to a new kubelet csr approver 2021-12-17 09:59:46 +01:00
Tim Bannister 3dd1eb1121
Add descriptions to tasks 2021-12-08 22:05:52 +00:00
Tim Bannister 5ab064ceea
Tidy resource management task pages
Revise tasks within “Manage Memory, CPU, and API Resources”:

- reword to avoid implying that API clients can create a container
  (you can, but its done by creating a Pod)
- call a manifest a manifest
- use tooltips where relevant
- link to new API reference not the old one
- other improvements
2021-12-08 22:05:36 +00:00
Jesse Butler 584421fe11 Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-12-06 08:55:54 -05:00
Erico Fusco f04516f995
Update kubeadm-upgrade.md (#30135)
* Update kubeadm-upgrade.md

`apt-mark hold` is still required when `apt-get` is used with `--allow-change-held-packages`.

`--allow-change-held-packages` unholds the package but it doesn't pin the new version.

* Add missing changes

* Update kubeadm-upgrade.md

Remove apt >1.1 examples.
2021-12-05 20:12:32 -08:00
Kubernetes Prow Robot 24c84387ac
Merge pull request #29078 from vaibhav2107/cluster-services
Remove the duplicate content from access-cluster.md
2021-12-05 19:22:32 -08:00
Kubernetes Prow Robot 246d261529
Merge pull request #29841 from pacoxu/patch-7
Add safe sysctl net.ipv4.ip_unprivileged_port_start
2021-12-05 17:46:32 -08:00
prameshj 63420166a1
Update docs to clarify the dns configmap format. (#29988)
* Update docs to clarify the dns configmap format.

* Update content/en/docs/tasks/administer-cluster/nodelocaldns.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

Co-authored-by: Qiming Teng <tengqm@outlook.com>
2021-12-05 17:28:32 -08:00
Kubernetes Prow Robot 089d6ee918
Merge pull request #30108 from sftim/20211016_revise_dynamic_kubelet_config_task
Revise dynamic kubelet config task
2021-12-02 10:03:34 -08:00
Jesse Butler 018f9d05a2 Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-12-01 12:23:10 -05:00
Kubernetes Prow Robot e5d4d25a77
Merge pull request #30604 from mengjiao-liu/kubelet-sysctl-allow-slashes
kubelet: sysctls allows slashes as a separator
2021-11-29 18:30:56 -08:00
sandipanpanda 269dad43a0
Fix broken link of Install Docker Engine - Enterprise on Windows Servers (#30105)
* Fix the broken link of Install Docker Engine

Fix the broken link of Install Docker Engine - Enterprise on Windows Servers. Updated the redirect URL from https://hub.docker.com/editions/enterprise/docker-ee-server-windows to https://docs.microsoft.com/en-us/virtualization/windowscontainers/quick-start/set-up-environment?tabs=Windows-Server#install-docker

* Fix the broken link of Install Docker Engine

* Fix the broken link of Install Docker Engine

* Update adding-windows-nodes.md

* Update adding-windows-nodes.md
2021-11-29 01:09:22 -08:00
Tim Bannister c043aca0dc Tidy page 2021-11-27 18:19:40 +00:00
Tim Bannister 282bc9187c Revise what's next section 2021-11-27 18:19:40 +00:00
Mengjiao Liu 159234a0a6 kubelet: sysctls allows slashes as a separator 2021-11-25 11:14:56 +08:00
Kubernetes Prow Robot 199047637f
Merge pull request #29709 from fromanirh/cpumanager-policy-options-feature-gates
node: cpumanager: policy options to beta: document the options graduation process
2021-11-23 12:34:52 -08:00
Francesco Romani 7d8483e0e4 node: cpumanager: document the graduation process
Document the graduation process and the maturity level
of the cpumanager policy options, and the new feature gate
involved. No changes regarding the existing options.

For more details: https://github.com/kubernetes/enhancements/pull/2933
Signed-off-by: Francesco Romani <fromani@redhat.com>
2021-11-23 18:01:15 +01:00
Kubernetes Prow Robot 29c2aedd69
Merge pull request #30537 from robscott/topology-hints-1.23
Updating Topology Aware Hints docs for 1.23
2021-11-22 18:22:17 -08:00
Rob Scott 2474ff93aa
Updating Topology Aware Hints docs for 1.23 2021-11-19 16:17:10 -08:00
Kevin Klues 378fc570b1 Add description of distribute-cpus-across-numa CPUManager policy option
Signed-off-by: Kevin Klues <kklues@nvidia.com>
2021-11-17 23:19:54 +01:00
Akihiro Suda e2f17b7579
Fix typos,config paths in kubelet-in-userns.md. Add link to port forwarder implementation (#30410)
* kubelet-in-userns.md: fix typoes

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>

* kubelet-in-userns.md: fix unexpected config paths

Referring to `/etc/containerd/config.toml` makes sense only when the user has
read/write permissions to `/etc/containerd/config.toml` in the current mount
namespace, which is not always assumed in the context of this documentation.

The same applies to `/etc/crio/crio.conf`, too.

Partially revert PR 30020.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>

* kubelet-in-userns.md: add back the link to example port forwarder implementation

Add back the link to `k3s/pkg/rootlessports/controller.go` removed in PR 30020.

As stated in `{{ <note> }}`, the corresponding section is written for developers
of Kubernetes distros, not for end users.
So we should retain the implementation details here.

Partially revert PR 30020.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2021-11-11 18:02:28 -08:00
Ashley Davis 8ae9faaed1
[en] update link to cert-manager docs
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2021-11-10 14:18:23 +00:00
Jihoon Seo 047c8577d5 Make redirection for highly-available-control-plane 2021-11-09 10:50:38 +09:00
Muller Hsu f0c98092e9
Update configure-upgrade-etcd.md
Typo
Should be `etcdctl` not etcdutl
2021-11-05 17:53:56 +08:00
Richie McG a7a4745b79
Revert an incorrect fix
corrections for  etctutl command name incorrectly “fixed” #30215
2021-10-27 18:56:16 +09:00
Kubernetes Prow Robot 4a3f2ef536
Merge pull request #30198 from SergeyKanzhelev/dockershimUpdates
Find out what container runtime is used and mention private registries
2021-10-26 17:15:41 -07:00
Sergey Kanzhelev 4a6d4d5dd3 find out what container runtime is used and mention private registries 2021-10-26 16:26:59 +00:00
Richie McG 64b5b16bac
Correct Typo
Correct typo form etcdutl to etcdctl on line 333
2021-10-23 17:29:03 +09:00
Kubernetes Prow Robot f5049435ab
Merge pull request #30064 from sftim/20211012_link_pv_reclaim_policy_change_task_new_api_reference
Tidy task about PV reclaim policy
2021-10-22 17:00:50 -07:00
Kubernetes Prow Robot 286db402a2
Merge pull request #30123 from sftim/20211017_more_responsive_figure_sizing
Make  figure sizing more responsive
2021-10-21 17:10:37 -07:00
Kubernetes Prow Robot 3f824a8989
Merge pull request #28601 from RA489/update_etcd
Example with data dir for restore
2021-10-18 01:35:51 -07:00
RA489 c689362c08 Example with data dir for restore 2021-10-18 10:32:25 +05:30
Tim Bannister dc84f0cb97 Mark figures' intended size
This commit activates Sass styling to make image sizes more responsive
on the rendered page.
2021-10-17 21:31:52 +01:00
Tim Bannister 24dab6c202 Tidy task about PV reclaim policy
- Use new API reference shortcode
- Tweak What's Next subheading to be a plural
2021-10-12 21:36:37 +01:00
Qiming Teng 59ad3d65b0 Tweak the kubelet in user namespace page
This PR fixes some nits in the page and adds some links for the
convenience of users.
2021-10-12 09:10:18 +08:00
xiao.li abadaf1ead Fix the page links to a section that doesn't exist 2021-10-01 14:25:25 -07:00
Shannon Kularathna d6345808f4 Add information to API evictions 2021-10-01 15:26:01 +00:00
Kubernetes Prow Robot e4e0bf43a8
Merge pull request #29102 from hoskeri/encrypt-data-doc
encrypt-data: Don't recommend AES-CBC
2021-09-30 14:27:15 -07:00
Kubernetes Prow Robot fc04dbea45
Merge pull request #29748 from JacobValdemar/patch-1
Remove unessesary indentation on code
2021-09-28 05:34:42 -07:00
Paco Xu 39d0870882
Add safe sysctl net.ipv4.ip_unprivileged_port_start
https://github.com/kubernetes/kubernetes/pull/103326
2021-09-28 14:46:25 +08:00
Kubernetes Prow Robot cfd025c0ac
Merge pull request #29682 from AkihiroSuda/minikube-rootless-docker
kubelet-in-userns.md: update for minikube
2021-09-22 02:50:02 -07:00
Jacob Valdemar c724a097bd
Add Line Break element after tab widget 2021-09-21 07:09:11 +02:00
silenceshell 064d6676d1 kubeadm upgrade to latest patch release, not latest stable 2021-09-21 10:23:14 +08:00
Jacob Valdemar 0e47e6de2b
Merge branch 'main' into patch-1 2021-09-19 22:24:31 +02:00
Jacob Valdemar 2cac383a7c
Undo "Add another newline after the tab widgets" 2021-09-19 22:17:40 +02:00
Jacob Valdemar cc8bda3f41
Add another newline after the tab widgets 2021-09-19 22:07:09 +02:00
Jacob Valdemar 483779104b
Undo accidental change to tabs name 2021-09-19 18:01:51 +02:00
Jacob Valdemar 6b610b8e33
Remove prefixed spaces in code environment 2021-09-19 17:55:11 +02:00
silenceshell 160d68bd43 kubeadm-upgrade should upgrade to current branch version other than the latest version 2021-09-19 11:00:41 +08:00
Kubernetes Prow Robot fa882c6ac3
Merge pull request #29394 from Patil2099/cascade-fix
Replace cascade=false -> cascade=orphan
2021-09-14 17:46:41 -07:00
Akihiro Suda bc0a2487f8
kubelet-in-userns.md: update for minikube
minikube now supports Rootless Docker driver.

minikube internally sets the KubeletInUserNamespace feature gate automatically
for supporting Rootless Docker driver.

https://minikube.sigs.k8s.io/docs/drivers/docker/

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2021-09-14 16:54:05 +09:00
Kubernetes Prow Robot 558f36cfe6
Merge pull request #28720 from anubha-v-ardhan/patch-2
Replace ha-master-gce.png with SVG
2021-09-10 03:27:59 -07:00
Anubhav Vardhan c9568cbaaf Update highly-available-control-plane.md 2021-09-10 09:44:25 +05:30
Anubhav Vardhan 2e361073b1
Update highly-available-control-plane.md 2021-09-09 20:20:49 +05:30
Kubernetes Prow Robot 87235b508d
Merge pull request #29311 from mengjiao-liu/update-githubbranch-param
Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value
2021-08-16 06:03:18 -07:00
Kubernetes Prow Robot ff44f2996b
Merge pull request #28978 from wesleyw72/cpu-management-burstable-cfs
Clarify that burstable pods also have their limit enforced by CFS quota
2021-08-15 03:39:46 -07:00
Pankaj Patil b4ef0b940e Replace cascade=false -> cascade=orphan 2021-08-14 20:27:40 +05:30
Mengjiao Liu f945335af6 Hard-code the name of the target repo's default branch instead of using the githubbranch parameter value 2021-08-10 18:03:21 +08:00
Hussein Kadiri e6082aca98
Update safely-drain-node.md 2021-08-09 09:37:05 -07:00
Yuiko Mouri 1ad2bce475 Fix missing link 2021-08-05 14:55:29 +09:00
Victor Palade 61ac44bb11 Merge master into dev-1.22 to keep in sync 2021-08-04 19:43:06 +02:00
Kubernetes Prow Robot c2b38df06f
Merge pull request #28138 from aanm/update-cilium-docs
Update cilium docs
2021-08-02 05:45:21 -07:00
Shubham Kuchhal bcd6bc07ce Fix Static Pod Link. 2021-08-02 15:27:02 +05:30
Kubernetes Prow Robot 2b457e1612
Merge pull request #28944 from aliakbar-hemmati/fix-28875
Add explanations for control-plane pods restart after certificate ren…
2021-07-31 20:29:20 -07:00
Kubernetes Prow Robot 2aa0117550
Merge pull request #29161 from steven-my/29096-update-location-for-preparenode-ps1
Update location of PrepareNode.ps1
2021-07-30 03:11:37 -07:00
Chad Lauritsen abeaf3e5ea
mark adjectival phrases with hyphens 2021-07-29 12:46:32 -04:00
Victor Palade 252c44c53d Merge master into dev-1.22 to keep in sync 2021-07-29 15:40:32 +03:00
Steven Yan 6db181178f Update location of PrepareNode.ps1 2021-07-29 16:35:26 +08:00
Kubernetes Prow Robot 3e806911c0
Merge pull request #28830 from chenxuc/kubelet-config-file
improve example for kubelet config file
2021-07-27 18:35:35 -07:00
Junaid Ali 2fe20a8ac4
Fix link to decoding a secret 2021-07-27 23:34:13 +01:00
Victor Palade 3c95e6a96b Merge master into dev-1.22 to keep in sync 2021-07-27 18:47:27 +03:00
cezaryzukowski 11c8889e6d
The Memory Manager graduates to Beta (#28851)
* Update gRPC messages documentation

* Revisions + extend docs

* Update content/en/docs/tasks/administer-cluster/memory-manager.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Revisions

* Update content/en/docs/tasks/administer-cluster/memory-manager.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

* Revisions

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Qiming Teng <tengqm@outlook.com>
2021-07-27 02:12:45 -07:00
Akihiro Suda 2860fbf1ad
Add `KubeletInUserNamespace` feature gate
Enables support for running kubelet in a user namespace.
The user namespace has to be created before running kubelet.
All the node components such as CRI need to be running in the same user namespace.

- Tracking issue: kubernetes/enhancements issue 2033
- KEP: https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2033-kubelet-in-userns-aka-rootless
- Implementation: kubernetes/kubernetes PR 92863

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2021-07-27 15:18:46 +09:00
Kubernetes Prow Robot d078b427b8
Merge pull request #28870 from shannonxtreme/gc-docs
Create garbage collection docs
2021-07-26 22:40:45 -07:00
Vaibhav 03dea1a56f Update the changes in access-cluster-services.md 2021-07-26 13:54:44 +05:30
Abhijit Hoskeri ff63695666 encrypt-data: Don't recommend AES-CBC
CBC is not recommended any more due to vulnerability
to padding oracle attacks.

Promote secretbox instead.
2021-07-23 13:03:33 -07:00
Vaibhav 816a5debe8 Remove the duplicate content from access-cluster.md 2021-07-22 18:54:41 +05:30
Kubernetes Prow Robot be5f25eade
Merge pull request #27891 from fromanirh/cpumanager-policy-options
cpumanager: document cpu manager policy options
2021-07-22 05:15:51 -07:00
Kubernetes Prow Robot 297ef84338
Merge pull request #28882 from jiahuif/feature/leader-migration/to-beta
KEP-2436 Leader Migration: to beta
2021-07-21 11:31:51 -07:00
Francesco Romani a376a29d7e cpumanager: document cpu manager static policy options
The enhancement https://github.com/kubernetes/enhancements/issues/2625
want to add a new kubelet option to fine tune the behaviour of the
cpu manager policies, and to do so we add support for cpu manager policy
options themselves.

Signed-off-by: Francesco Romani <fromani@redhat.com>
2021-07-21 16:25:19 +02:00
Kubernetes Prow Robot 793c66fffc
Merge pull request #28474 from SergeyKanzhelev/deprecateDynamicKubeletConfig
deprecation of DynamicKubeletConfig feature flag
2021-07-21 06:52:08 -07:00
Indeed e4505847a6 fix typo. 2021-07-19 12:44:37 -07:00
Indeed b7a4d76be5 match Leader Migration beta implementation. 2021-07-19 12:44:37 -07:00
Wesley Williams 723b94de50 Clarify that burstable pods also have their limit enforced by CFS quota 2021-07-16 18:10:38 +01:00
aliakbar 85cc70b333 Add explanations for control-plane pods restart after certificate renewal 2021-07-16 21:08:38 +04:30
Anubhav Vardhan 436d3fe8c4
Update content/en/docs/tasks/administer-cluster/highly-available-control-plane.md
Co-authored-by: chrismetz09 <cymetz@gmail.com>
2021-07-14 08:48:53 +05:30
Shannon Kularathna b1573ad314 Create garbage collection docs 2021-07-13 20:32:50 +00:00
Christopher Negus 548ba073da Merge main into dev-1.22 to keep in sync 2021-07-09 18:19:13 +00:00
Qiming Teng 6e6c1f8920 Redirect kubeadm config reference
Instead of redirecting users to the godoc site for kubeadm configuration options, we'd better point them to the generated reference.
2021-07-09 12:54:18 +08:00
Kubernetes Prow Robot 3f21885d6b
Merge pull request #28657 from RA489/update_ha
Update highly-available-control-plane
2021-07-08 16:50:53 -07:00
André Martins e4615a2ffb tasks/network: add Cilium in dual-stack supported plugins
Update installation steps with the latest stable release.

Signed-off-by: André Martins <aanm90@gmail.com>
2021-07-09 01:37:00 +02:00
Kubernetes Prow Robot 4c6a904242
Merge pull request #28360 from neolit123/1.22-add-v1beta3
kubeadm: use the new v1beta3 instead of v1beta2
2021-07-08 09:42:54 -07:00
Sergey Kanzhelev a4fbeb27dc deprecation of DynamicKubeletConfig feature flag 2021-07-08 00:11:52 +00:00
chenxuc 1542bedae4 improve example for kubelet config file 2021-07-07 20:31:41 +08:00
Kubernetes Prow Robot 97e1fb57bf
Merge pull request #28109 from hardikshah197/issue#28062
Improvement for k8s.io/docs/concepts/overview/working-with-objects/namespaces/  link updated with v1 namespace
2021-07-03 15:04:18 -07:00
Anubhav Vardhan 71507509b3
Update highly-available-control-plane.md 2021-07-01 14:47:28 +05:30
Kubernetes Prow Robot 3f5a3fe6ed
Merge pull request #28492 from chrisnegus/add-view-csr
Added command to view CSR to Certificates page
2021-06-28 13:12:29 -07:00
RA489 74d913a919 Update highly-available-control-plane 2021-06-28 12:52:07 +05:30
Jihoon Seo d5feed3ed7 Replace 'master' with 'control plane' 2021-06-25 17:39:22 +09:00
Victor Palade 1064c8dcff Merge master into dev-1.22 to keep in sync. 2021-06-22 19:52:26 +02:00
Luke Ingalls 7f15418fae
docs: typo 2021-06-18 20:01:07 -06:00
Christopher Negus 69c9e63e9f Added command to view CSR to Certificates page 2021-06-18 22:05:21 +00:00
Kubernetes Prow Robot 5dfcf92490
Merge pull request #28447 from tengqm/fix-file-modes
Remove exec permission on markdown files
2021-06-17 19:04:04 -07:00
Qiming Teng e9703497a1 Remove exec permission on markdown files
For some unknown reasons, we have got many markdown files with exec
permission. That is weird and risky.
2021-06-16 17:57:00 +08:00
Kubernetes Prow Robot 3529fc6ebb
Merge pull request #28312 from antoinep92/patch-1
Document recovery from broken kubelet certificate
2021-06-14 22:08:00 -07:00
Kubernetes Prow Robot 45a1150178
Merge pull request #28056 from cynepco3hahue/fix_memory_manager_policies
memory manager: update policies names according to the code
2021-06-14 21:52:02 -07:00
Kubernetes Prow Robot e5b5f45e7c
Merge pull request #28408 from tengqm/fix-links-1
Fix some links in the tasks section
2021-06-14 16:24:01 -07:00
hardikshah197 6fae06b5c8 changes made 2021-06-14 23:36:52 +05:30