4a3d9e433a
Update rbac-good-practices.md
...
Fix typos on page "Role Based Access Control Good Practices"
2024-01-30 13:58:54 -05:00
a64b2324c7
Merge pull request #42355 from deepak4566/Deepak-1
...
Remove API server --enable-logs-handler argument from docs
2024-01-09 16:52:58 +01:00
bcc55ae7c9
fix outdated link/anchor
...
Signed-off-by: hunshcn <hunsh.cn@gmail.com>
2024-01-03 15:00:11 +08:00
e2509cb624
Merge pull request #44506 from Takashiidobe/fix-typos
...
fix typos
2024-01-02 19:29:55 +01:00
fc8e79b96c
update safe sysctl
...
Signed-off-by: hunshcn <hunsh.cn@gmail.com>
2023-12-25 10:47:54 +08:00
d536e46dbd
fix typos
2023-12-24 21:00:53 -05:00
45fb394ca7
Merge main into dev-1.29 to maintain sync
2023-12-07 15:59:56 +00:00
bb2cb5fa86
update sysctl-cluster.md, pod-security-standards.md
...
Signed-off-by: hunshcn <hunsh.cn@gmail.com>
2023-12-01 14:47:36 +08:00
8dc08062a7
Link PSS to User Namespaces
...
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2023-11-30 12:16:59 +01:00
2d9fbc1c7e
Merge remote-tracking branch 'upstream/main' into dev-1.29
2023-11-22 22:07:26 +00:00
244c6353bd
Improve documentation for `kubernetes.io/enforce-mountable-secrets` annotation on `ServiceAccount`
2023-11-22 00:46:34 +09:00
f893a19ee6
Resolved merge conflict when merging main into dev-1.29 branch
2023-11-19 16:02:40 +01:00
42c9e4e20f
KEP-4193: bound service account token improvements
...
Signed-off-by: Monis Khan <mok@microsoft.com>
2023-11-16 08:48:59 -05:00
5f3f34b39b
Fix some typos in [en] docs.
...
Signed-off-by: yanggang <gang.yang@daocloud.io>
2023-11-16 00:35:39 +00:00
430dad213e
Merge pull request #42486 from raesene/main
...
Kubernetes Hardening Guide Section on Authentication Mechanisms
2023-09-18 10:22:31 -07:00
0e9e6affd3
fix broken link
2023-09-07 16:47:01 +05:30
1a3cf0a7fa
Change text in Pod Security Admission metrics ( #42856 )
...
* Change text in Pod Security Admission metrics
* remove changes from the metrics.md file
2023-09-03 13:05:47 -07:00
bf75860f4d
Merge pull request #41814 from ugur99/ugur-develop
...
List metrics that relate to Pod security admission
2023-09-03 10:19:46 -07:00
8ed2edd0e2
change serviceaccount wording
2023-08-27 09:31:11 +01:00
076c879c70
Update content/en/docs/concepts/security/hardening-guide/authentication-mechanisms.md
...
Co-authored-by: Qiming Teng <tengqm@outlook.com>
2023-08-27 09:28:51 +01:00
5f17fd8fb3
[en] typo secrets-good-practices.md
2023-08-22 03:07:58 +03:00
eee06d1b81
Add whitespace into “Good practices for Kubernetes Secrets” ( #42650 )
...
* Update secrets-good-practices.md
changed caution as per docs
https://kubernetes.io/docs/contribute/style/style-guide/#caution
* Update secrets-good-practices.md
added spaces as per style guide https://kubernetes.io/docs/contribute/style/style-guide/#caution
2023-08-20 19:33:22 -07:00
0761ef8e19
Update content/en/docs/concepts/security/hardening-guide/authentication-mechanisms.md
...
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2023-08-19 18:28:41 +01:00
3dd0bd16ba
sentence case, wrapping and fixes from comments
2023-08-19 15:37:26 +01:00
1e7a4eb633
Initial commit of Draft Kubernetes Hardening Guide Section on Authentication Mechanisms
2023-08-10 13:39:03 +01:00
fd6648f165
removed( enable log handling) command and its content
2023-08-02 19:28:38 +05:30
bae7a10d64
attached correct link to the documentation
2023-08-02 18:54:14 +05:30
ca08498f33
Provide a consistent appearance to bullets
2023-07-25 09:23:22 +08:00
3581bb036d
Reword seccomp paragraph to remove alpha feature reference
...
Fix capitalization
2023-07-09 09:46:29 -07:00
b773649fb2
improvement psa document fix
...
Signed-off-by: Ugur <ugurozturk918@gmail.com>
2023-06-30 16:20:31 +02:00
26f72a7358
improvement psa document
...
Signed-off-by: Ugur <ugurozturk918@gmail.com>
2023-06-30 13:09:21 +02:00
49135cefb8
Tweak line wrappings in /services-networking/ingress.md
2023-06-01 21:38:11 +08:00
821ca22ac1
Merge pull request #40915 from mrgiles/37738_securing_cluster_checklist_align
...
Add links between Securing a Cluster and Security Checklist for alignment
2023-05-15 13:45:34 -07:00
eb7c049f04
Merge pull request #40376 from dtzar/patch-1
...
clarify Windows privileged containers feature enablement
2023-05-07 03:51:16 -07:00
057766eed7
updated link
2023-05-02 00:35:47 +05:30
19a3dc0f6f
Add links between securing cluster and security checklist
2023-04-30 23:28:52 -07:00
d8a6fd602c
fixed broken link
2023-04-28 22:39:33 +05:30
8f3790c3a9
clarify Windows privileged containers feature enablement
2023-04-07 10:50:25 -07:00
7b7fa2c8ec
Merge pull request #38874 from sftim/20230110_add_logs_api_to_security_checklist
...
Add /logs API to security checklist
2023-04-03 08:31:51 -07:00
47319756be
fix links in service-accounts.md
2023-03-28 14:48:04 +09:00
458c0e3b26
Improvement: Added the Note for External applications. ( #39691 )
...
* Improvement: Added the word External applications.
* Added the Note for External Applications.
* Modify the note
2023-03-21 20:08:36 -07:00
52bb8f9282
Add /logs API to security checklist
...
It's best to disable this API, which is deprecated at the time of
writing.
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2023-03-16 17:38:38 +00:00
da84dd8419
Merge pull request #39436 from sftim/20230213_tweak_sa_concept
...
Fix wording, punctuation and Markdown for ServiceAccount concept page
2023-02-14 15:53:41 -08:00
ee4b88ed37
Merge pull request #37733 from sftim/20221105_update_docs_podsecuritypolicy_removal
...
Update documentation for PodSecurityPolicy removal
2023-02-14 12:55:51 -08:00
96d49317a2
Fix wording for ServiceAccount concept
...
Co-authored-by: Qiming Teng <tengqm@outlook.com>
Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
2023-02-14 09:17:03 +00:00
cb5a8930dc
Fix broken anchor
2023-02-14 09:16:57 +00:00
9eb2767333
Add a missing anchor pound sign
2023-02-13 12:49:20 -05:00
b1f18bfa9b
Merge pull request #38289 from shannonxtreme/service-account
...
Add a new concept page for service accounts
2023-02-13 09:37:29 -08:00
7cb6d1eb35
Add a new concept page for service accounts
...
Also add a glossary definition for JWTs
Co-authored-by: Tim Bannister <tim+github@scalefactory.com>
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: stlaz <https://github.com/stlaz >
2023-02-13 17:29:12 +00:00
42e746a379
Clean up api-server-bypass-risks.md
2023-02-06 09:55:04 +08:00
John Reese
Kubernetes Prow Robot
hunshcn
Takashiidobe
Kat Cosgrove
Sascha Grunert
chansuke
Oluebube Princes Egbuna
Monis Khan
yanggang
SomPandey
MeenuyD
Rory McCune
Rory McCune
Arhell
Dudi Varaprasad
Deepak
windsonsea
Marcelo Giles
Ugur
Michael
niranjandarshann
David Tesar
Hiroki Takatsuka
Shubham
Tim Bannister
Shannon Kularathna
zhuzhenghao