Commit Graph

62 Commits (03ae214e8129b009b7a336dfa328e3eb2cb15dc2)

Author SHA1 Message Date
Jan Safranek 8e17234d93 Mention MountOption as the default 2024-11-19 10:03:41 +01:00
Jan Safranek bf32989b93 Mention KCM configuration 2024-11-19 09:52:58 +01:00
Jan Safranek 2c4e08e43a Document SELinuxChangePolicy and SELinuxMount 2024-11-19 09:42:55 +01:00
hacktivist123 e6d2e1499d Merge main into dev-1.31 to keep in sync 2024-07-29 18:03:33 +01:00
Kubernetes Prow Robot 6156fd9e40
Merge pull request #46920 from everpeace/dev-1.31-KEP-3619-SupplementalGroupsPolicy
[dev-1.31] KEP-3619: Fine-grained SupplementalGroups control
2024-07-27 04:38:44 -07:00
Shingo Omura 3fb2925b56
Apply suggestions for improvements from code review
Co-authored-by: Qiming Teng <tengqm@outlook.com>
2024-07-26 10:07:58 +09:00
Vinayak Goyal 87a705579f KEP-24: Graduate Kubernetes' support for AppArmor to GA.
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
2024-07-24 23:17:07 +00:00
Shingo Omura edd8ab30be
KEP-3619: addresses review feedbakcks 2024-07-23 09:51:57 +09:00
Shota Yoshimura 28e1d2a516
Add `/sys/devices/virtual/powercap` to Masked Paths in security-context.md
The document does not reflect the following:
ref https://github.com/kubernetes/kubernetes/pull/125970
2024-07-22 14:50:57 +09:00
Shingo Omura c5f020c0e4
KEP-3619: Fine-grained SupplementalGroups control 2024-07-10 22:16:44 +09:00
Tim Bannister e741392f76 Fix broken hyperlink 2024-03-27 11:33:50 +00:00
Peter Hunt c3e2106694 add documentation for the ProcMount field, originally introduced in 1.12
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-03-26 10:04:06 -04:00
Jan Safranek 6a1761c33a Document SELinuxMount feature gate
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2024-03-12 16:51:54 +01:00
Mengjiao Liu e8b136c3b3 Use code_sample shortcode instead of code shortcode 2023-09-05 17:10:14 +08:00
Mengjiao Liu 68ba9633a2 Switch English to use code not codenew shortcode 2023-08-01 16:57:17 +08:00
Kubernetes Prow Robot 004c8d3d03
Merge pull request #42183 from ChetHosey/patch-1
Correct link title in security-context.md.
2023-07-27 14:00:10 -07:00
Andrey Goran eb522c126f
Replace {{< codenew ... >}} with {{% codenew ... %}} in all English docs (#42180)
* Replaced {{< codenew ... >}} with {{% codenew ... %}} in all files

* Reverted changes in non-english localizations
2023-07-25 05:54:06 -07:00
ChetHosey 8dee0cdd3e
Correct link title in security-context.md.
The link to an article discussing Docker and SELinux has been replaced with a link to a CRI Plugin configuration guide, which includes configuration items related to AppArmor and SELinux.

However the link still has the original title ("Tuning Docker with the newest security enhancements"). This change updates the title to match the title of the current target article.
2023-07-24 15:19:24 -07:00
Jan Safranek 6e568b89aa Flip SELinuxMountReadWriteOncePod to Beta
Co-authored-by: Qiming Teng <tengqm@outlook.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2023-04-03 16:24:26 +02:00
Chris Henzie e600a75b41 Update ReadWriteOncePod feature to beta 2023-03-14 13:52:52 -07:00
Kubernetes Prow Robot c5778fd5c0
Merge pull request #38920 from a-mccarthy/update-page-weights
Update page weights in tasks section
2023-02-23 14:29:35 -08:00
João Carlos Ferra de Almeida 4442de1ce7
Grammar fix
replace contrainer to container in security-context.md
2023-01-30 17:24:06 +00:00
Abigail McCarthy 97693ff044 Update page weights in /tasks/access-application-cluster, /configure-pod-container, /configmap-secret 2023-01-13 11:05:25 -05:00
Qiming Teng a437285212 Fix nits in markdown links
This PR fixes a few "bad links" identified by the `scripts/linkchecker.py` script.
2022-12-22 08:45:10 +08:00
Fabio Bertinatto aa36f72d06
DelegateFSGroupToCSIDriver is GA in 1.26 (#37700)
* DelegateFSGroupToCSIDriver is GA in 1.26

* Update content/en/docs/reference/command-line-tools-reference/feature-gates.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

Co-authored-by: Qiming Teng <tengqm@outlook.com>
2022-11-21 08:24:31 -08:00
Pro-Coder04 30b42602f0
Update content/en/docs/tasks/configure-pod-container/security-context.md
Co-authored-by: Qiming Teng <tengqm@outlook.com>
2022-09-30 17:11:22 +05:30
Pro-Coder04 744a7b6c79 Removed Duplicated words in Security-Context 2022-09-30 16:58:06 +05:30
Stanlee fa4a73e1f3
typo corrected
if typo corrected
2022-09-11 21:07:51 +02:00
Kubernetes Prow Robot e36b9f35d5
Merge pull request #35667 from jsafrane/selinux-alpha
Add docs for "Speed up SELinux volume relabeling using mounts"
2022-08-16 08:25:08 -07:00
Jan Safranek 77df8a9fb5 Add documentation for SELinuxMountReadWriteOncePod alpha feature
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2022-08-16 09:49:53 +02:00
Jordan Liggitt b167938367 Scrub PSP docs for 1.25 2022-08-15 21:09:41 -04:00
Sean Wei 34155fed0b Fix links for k/design-proposals-archive
The contributors/design-proposals in k/community was removed. It's only
available in k/design-proposals-archive repo now.

This commit also changes https://github.com/kubernetes/repo/blob/master/file.md
to https://git.k8s.io/repo/file.md for better consistency.
2022-06-10 22:49:04 +08:00
HeGaoYuan ae677063f9
Update security-context.md
typo
2022-04-28 00:47:00 +08:00
Kubernetes Prow Robot 27684b7e90
Merge pull request #32565 from vaibhav2107/sec-context
Update the doc regarding outdated info in the link
2022-03-31 14:41:05 -07:00
Tim Bannister 672813f3e7
Move PSP into Security concepts section
The logical navigation definitely works better if Pod Security admission
and PodSecurityPolicy are pages in the same section. Make It So.

Co-authored-by: Rey Lejano <rlejano@gmail.com>
2022-03-30 17:30:35 +01:00
Vaibhav fa8872f70f Update the doc regarding out of date link 2022-03-28 01:07:38 +05:30
Qiming Teng 52696d80b0 Fix links in security context page
The links to AppArmor etc are using redirection records. This is a bad
practice because when translating the page to a different language, the
link will become invalid. So we should use the actual target in the
English source.

This PR also fixes some incorrect syntax directives for code snippets.
2022-02-13 08:05:30 +08:00
shivam tyagi e39fc674e4 Update
Signed-off-by: shivam tyagi <shivamt.ug19.ec@nitp.ac.in>
2022-01-20 07:42:14 +05:30
Kubernetes Prow Robot 48612bee86
Merge pull request #30553 from gnufied/kep-695-doc
Move ConfigurableFSGroupPolicy to GA
2021-11-29 13:51:21 -08:00
Hemant Kumar 2ebfcfea1a Update docs for ConfigurableFSGroupPolicy 2021-11-29 14:03:26 -05:00
Cheng Xing 1e0796c4e4 Delegate FSGroup to CSI beta 2021-11-10 17:02:51 -08:00
Kubernetes Prow Robot 2007c90673
Merge pull request #28869 from verult/fsgroup-to-csi
Documentation for delegating FSGroup change to CSI driver
2021-07-21 07:04:08 -07:00
Cheng Xing ac68a21c9a Documentation for delegating FSGroup change to CSI driver 2021-07-19 14:28:07 -07:00
Shubham Kuchhal 21f7528b75 Update the Seccomp link. 2021-06-29 12:24:04 +05:30
Kiran Mova 333b04b12f
remove alpha feature note from fsGroupChangePolicy 2021-05-26 17:45:20 +05:30
Matthew Cary c5ffbec1ea placeholder CL for fsgroup policy beta 2020-11-09 21:14:47 +00:00
Anna Jung 09d0f598fa Merge master into dev-1.19 to keep in sync 2020-08-11 08:34:02 -05:00
Qiming Teng 92ae1a9cf8 Tune links in tasks section (2/2) 2020-08-08 16:15:28 +08:00
Kubernetes Prow Robot 3841d72380
Merge pull request #21278 from hasheddan/seccomp
Add documentation for Seccomp GA
2020-07-20 12:14:39 -07:00
hasheddan 3ad7ea77f1
Add documentation for generally available seccomp functionality
Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
2020-07-20 13:51:17 -05:00