Commit Graph

79 Commits (352fafdcc7a41f673b64e706e83a69dda0350275)

Author SHA1 Message Date
Tim Allclair 75652e8585 Standardized pod security profiles 2020-05-20 16:54:37 -07:00
iaoiui af50366896
Some docs incorrect v1.18 kubectl run command (#20784)
* use "kubectl create deploy" instead of "kubectl run"

* omit whitspace fix

* omit whitspace fix

* avoid shorthand
2020-05-08 19:27:52 -07:00
Tim Bannister 5e0e03dec6 Tidy LimitRange concept 2020-04-18 17:47:06 +01:00
Yuk, Yongsu a1a34783fb Update relative link to internal link. 2020-04-10 17:12:41 +09:00
Jordan Liggitt ace502b542 Make feature-state tag usage consistent 2020-04-09 13:19:41 -04:00
Davi Garcia f1db8331c2 Replace embedded examples with links to related task docs
Signed-off-by: Davi Garcia <dvercill@redhat.com>
2020-04-03 14:56:17 -03:00
Rajesh Deshpande bb31515540
Removing namespace flag from commands (#19331)
* Removing namespace flag from every command

As at the start of task, context is set to a namespace using a command, subsequent commands do not need '-n namespace-name' flag.

* Changing context back to default

Changing context back to default

* Adding a cleanup header

Adding a cleanup header

* implementaing review comments

implementaing review comments
2020-03-25 19:12:26 -07:00
CJ Cullen 08c535577b
Add to the PSP warning about PVs that hostPath PVs cannot be made read-only. (#19504) 2020-03-15 23:04:35 -07:00
Daniel Helfand 9e289296c2
fix typos and styling for limitrange doc (#18961) 2020-03-15 22:02:35 -07:00
Qiming Teng e0a03c0ebd
Resource name constraints (5) (#19122)
xref: #17969, #19099, #18746
2020-03-15 21:52:36 -07:00
Kubernetes Prow Robot 6635262bbc
Resource name constraints (4) (#19121)
xref: #17969, #19099, #18746
2020-03-05 11:28:38 -08:00
Kubernetes Prow Robot 3d63002fa3
Resource name constraints (3) (#19120)
xref: #17969, #19099, #18746
2020-03-05 06:18:38 -08:00
Andrew Allbright 470f932dd8
Latin Abbreviations "vs" Updated to "versus" (#19181)
* grep -lR ' vs ' ./content/en/docs | xargs sed -i '' -e 's/ vs / versus /g'

* Update content/en/docs/concepts/configuration/overview.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Update content/en/docs/concepts/policy/resource-quotas.md

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>
2020-02-19 00:14:25 -08:00
Jacky Wu 9803c508b4
doc: add pod security policy reference link to document. (#18729)
* doc: add pod security policy reference link to document.

* doc: add what's next for pod-security-policy ref.
2020-01-29 14:50:15 -08:00
Naoki Oketani d6024d62f5 remove $ following the style guide (#18855) 2020-01-27 07:59:08 -08:00
Naoki Oketani bb06ed1193 fix an example path (#18848) 2020-01-24 06:32:32 -08:00
Raj Babu Das d3086a37c0 removing extra space in kubectl command (#18640)
Signed-off-by: Raj <raj.das@mayadata.io>
2020-01-13 06:25:40 -08:00
Pablo Castellano 10c3c6765a Fix typo and remove duplicate reference (#17666)
`AllowedHostPaths` appeared twice
2020-01-13 04:43:37 -08:00
Damini Satya dff2f7b960 Official 1.17 Release Docs (#18011)
* feat: graduate TaintNodesByCondition to GA (#17073)

* Promote StartupProbe to beta (enabled by default). (#17164)

* Watch bookmarks to GA (#17026)

* feat: graduate ScheduleDaemonSetPods to GA (#17350)

* Update Docker installation instructions (#17405)

* Use exact version numbers for installing Docker in Ubuntu (#17428)

* Move CSIMigration and CSIMigrationGCE to Beta in Kubernetes v1.17 (#17478)

* Promote NodeLease feature to GA (#17189)

* Update docs for csi topology ga (#17408)

* Update RunAsUsername to beta (#17460)

* doc:Update RunAsUsername to beta

* doc: update samples - kubernetes.io/os is no longer beta

* Updating based on review feedback

* Promote Node-specific volume limits to GA (#17432)

* Promote PodShareProcessNamespace to stable (#17192)

* Promote PodShareProcessNamespace to stable

* Add for_k8s_version to feature-state label

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Readd version-check to shareProcessNamespace task

* Update service load balancer finalizer doc for GA (#17438)

* Update Topology Manager docs (#17451)

* Added information on how device plugins can take advantage
of Topology Manager
* Updated the Topology Manager documentation to include additionalinformation and update some out of date sections

* Fix broken Topology Manager link (#17746)

Part of What's Next Device Plugin section

* Update CRD defaulting docs for GA (#17450)

* Add documentation for VolumeSnapshot Beta (#17233)

* Updating EndpointSlice documentation for beta release in 1.17 (#17411)

* (docs/dualstack): v1.17 updates (#17457)

* Add placehold doc updates for dualstack in 1.17

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* Add Downward API and /etc/hosts Pod IP validation

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* remove addressed known issue via k/k pr 85246

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* Remove known issue and add flag as part of k/k 79993

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* remove follow up placeholders

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* Update verbiage

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* Make IP addressing consistent throughout the task

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* Update to status.podIPs

Signed-off-by: Lachlan Evenson <lachlan.evenson@microsoft.com>

* Update content/en/docs/tasks/network/validate-dual-stack.md

Use set instead of env

Co-Authored-By: Khaled Henidak (Kal) <khnidk@outlook.com>

* add topology.kubernetes.io/zone, topology.kubernetes.io/region and node.kubernetes.io/instance-type labels to docs (#17498)

Signed-off-by: Andrew Sy Kim <kiman@vmware.com>

* Service topology alpha documentation (#17459)

* Update list of feature flags for in-tree plugins migrated to CSI (#17533)

Signed-off-by: Deep Debroy <ddebroy@docker.com>

* Update Node concept for TaintNodesByCondition going GA (#17577)

* feat: graduate ResourceQuotaScopeSelectors to GA in 1.17 (#17554)

* kubeadm: update the upgrade documentation for 1.17 (#17587)

* doc: Simplify Windows deployments with RuntimeClass (#16697)

* doc: Simplify Windows deployments with RuntimeClass

* Updating on review feedback

* doc: Adding windows-build label from enhancement 1301

* update doc for kubelet option --reserved-cpus (#17648)

* feat: update TaintNodesByCondition in feature gates table (#17377)

* Update docs for v1 resource quota configuration (#17547)

* AdmissionConfiguration v1 (#17548)

* Update WebhookAdmissionConfiguration examples (#17549)

* Update AWS EBS Migration Feature state (#16126)

* Add resource version section to api-concepts documentation (#16910)

* Add Resource Version semantics section to api concepts

* Clarify risks of going back in time, add details about compaction and watch cache sizes

* Apply suggestions from liggitt

Co-Authored-By: Jordan Liggitt <jordan@liggitt.net>

* remove pesudocode, apply feedback

* Fix typo

* Clarify equality rules

* Cleanup kubectl generators docs (#17609)

* Write ReplicationController without a space

* Drop mentioning unsupported cluster versions

* Fix capitalization for “API group”

* Tweak wording

* Avoid using deprecated generator in example

* add Antrea description in dev-1.17 (#17919)

* Promote VolumeSubpathEnvExpansion to GA

* Reference Documentation for the Kubernetes API for 1.17 (#18019)

* Update feature-gates.md (#18033)

* Reference Documentation for kubectl Commands for 1.17 (#18017)

* Update for v1.17 (#18034)

* Update config.toml(release-1.17) for 1.17 (#18031)
2019-12-09 16:11:29 -08:00
Pablo Castellano b2a9043df6 Fix typos in Limit Ranges (#17665) 2019-11-21 04:15:28 -08:00
Alexey Pyltsyn f120439575 Improve Concepts section (#17013)
Signed-off-by: Alexey Pyltsyn <lex61rus@gmail.com>
2019-10-27 18:49:25 -07:00
Tanveer Alam 45c0769b54 Pods count should be part of object-count's spec. (#16859)
Pods count was added in compute-resources spec which should be in objects-count spec as we're passing count of pods in the definition.
2019-10-14 15:45:50 -07:00
PingWang 46f596fd5b Fix typos (#16731)
Signed-off-by: PingWang <wang.ping5@zte.com.cn>

Fix typos in limit-range.md

Signed-off-by: PingWang <wang.ping5@zte.com.cn>
2019-10-07 20:25:11 -07:00
Praveen Sastry b2d803d71e Rename `Flexvolume` to `FlexVolume` in docs (#16333) 2019-09-12 09:42:27 -07:00
Ismail Alidzhikov 34c22e6c75 Change Windows line-endings to Unix (#15195)
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2019-08-27 07:34:43 -07:00
Jordan Liggitt 1830e56fa2 Clarify PSP/PV interaction (#15756) 2019-08-08 17:19:27 -07:00
Ismail Alidzhikov b692fddd32 kubectl config set-context --current (#15194)
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2019-07-02 08:09:09 -07:00
Tammer Saleh 7f90c73a01 Clarify Pod Security Policy Ordering (#13484) 2019-06-24 20:46:34 -07:00
Barnabas Makonda 455f312775
Merge branch 'master' into dev-1.15 2019-06-19 23:19:27 +03:00
Supriya Sirbi 01bd547d3e Issue #14768- update Resource-quotas.md (#14963)
Remove "cpu" and "memory" description since they are no longer used
2019-06-19 12:14:31 -07:00
MAKOSCAFEE 8781518d32 update with master content resolving merge conflicts 2019-06-19 19:10:18 +03:00
Josiah Bjorgaard b2c496aec3 Clarify mutation behavior with MustRunAsNonRoot (#14820) 2019-06-18 15:18:35 -07:00
Pingan 528fd25b3f fix a mistake in limit-range.md (#14836) 2019-06-12 06:53:33 -07:00
Jordan Liggitt fc86f8fef9 Add custom resource quota example (#14492) 2019-06-10 12:25:10 -07:00
Jay Beale 8f4fe15e14 Correction: sysctl entries aren't annotations (#14796)
* Correction: sysctl entries aren't annotations 

First, thank you for your work on this documentation. It means so much to so many users. I found that the sysctl documentation linked here explains that sysctl pod security policy entries are in the spec field, not done via annotation. This corrects it, using as much of the original language as possible from the linked sysctl documentation.

* Update pod-security-policy.md
2019-06-10 20:53:41 +08:00
Carlone c19c669c7c Fix typo in limit-range.md. (#14730) 2019-06-05 18:28:12 -07:00
Martin Vladev 8e541844e9 Use `runtime/default` for seccomp. (#14616) 2019-05-29 19:34:20 -07:00
krmayankk 60006e9164 fix runasgroup psp policy (#14121) 2019-05-16 16:06:29 -07:00
Elvadas NONO 37df3efaf9 Documentation LimitRange Policies (#14086)
*  Documentation LimitRange Policies

* Fixing limirange docs issues

*  Style and grammar

* Reviewer wanted

*  syntax and grammar feedbacks
2019-05-07 22:32:34 -07:00
Kenichi Omichi 9ae02fcbb0 Fix orders of yaml of policy/pod-security-policy (#14191)
The orders of `kind` were random, and that made the doc unreadable.
This fixes the orders in consistent way in pod-security-policy.md.
2019-05-06 17:41:41 -07:00
Christoph Stäbler 6ac9e62b1f Fixed grammar issue in pod-securityy-policy.md (#13823)
Fixed grammar issue
2019-04-15 19:39:05 -07:00
RaviSantosh Gudimetla d80e7f66c5 Remove enable resource quota note (#13732)
* Remove enable resource quota note

As of now, `ResourceQuotaScopeSelectors` is enabled by default, since it's in beta. So, let's remove it.

* Update resource-quotas.md
2019-04-09 18:12:12 -07:00
Shashank Patel 432d298753 fix typo resource quota page (#13712)
Associated with #13710
2019-04-09 09:12:01 -07:00
Shashank Patel 5c93be0e11 fix typo pod security page (#13714)
Associated with #13713
2019-04-09 04:49:06 -07:00
Supriya Sirbi 5f6cc2de23 Issue #13506 Update Pod Security Policy (#13655) 2019-04-08 18:13:05 -07:00
Slava Semushin acc4c33888 pod-security-policy.md: update to use PSP from policy/v1beta1 and fix a broken link. (#12768) 2019-03-07 14:16:07 -08:00
Himanshu Pandey 9fcf418680 Removed junk character from output (#12649) 2019-02-14 21:39:15 -08:00
Slava Semushin 39eb9ad57d pod-security-policy.md: fix a broken link. (#12590) 2019-02-12 03:39:20 -08:00
Steven E. Harris ef3c9ec370 Correct ResourceQuota PriorityClass config example (#12055)
The LimitedResource type has the field "MatchScopes" as a sibling to
the field "Resource," but the YAML document in the example showed the
"MatchScopes" field as a child of the top-level Configuration
type. Correct the example to match the actual schema.

While we're here, swap the order of the "scopeName" and "operator"
fields used in the YAML, to make it clearer in infix style that the
operator binds the scope name to a (possibly empty) set of values.
2019-01-08 04:21:44 -08:00
houjun 192c693c0a fix control aspect of PodSecurityPolic to include RunAsGroup (#11108) 2018-11-20 17:01:37 -08:00