Commit Graph

428 Commits (9cd582fd7ad285280c3340799a50f1512c69d23f)

Author SHA1 Message Date
Jared 7aee1d8528 Merge branch 'master' into patch-1 2016-12-07 17:20:42 -08:00
Jeff Schroeder d918aca4e4 Fix minor syntax bug in the authentication docs 2016-12-07 16:00:45 -06:00
Sam Ghods b650f662dd Fix grammatical issues in node.md 2016-12-06 17:54:38 -08:00
Jared af6a428688 Update authentication.md 2016-12-06 17:30:17 -08:00
Luke Kysow 8ffb484df9 Add newline to markdown so bullets show up properly 2016-12-05 14:48:21 -08:00
pao 448b8c074f Update dns.md: add details about subdomain. 2016-11-29 12:12:18 +08:00
Cao Shufeng 3a9566810e [kubenet] add description about non-masquerade-cidr
For kubenet, users should run kubelet with argument
--non-masquerade-cidr, or pods may have problem when access
"10.0.0.0/8" cidr. Also, if --pod-cidr is set outside the scope
of --non-masquerade-cidr, node will do ip masquerade for ingress
packets, which is not excepted.
2016-11-23 23:47:13 -05:00
Zihong Zheng 4a32cb82da Updates addons section for cluster-components 2016-11-22 09:42:01 -08:00
devin-donnelly 01935a77ad Merge pull request #1522 from sjenning/fix-autoscaler-doc
AUTOSCALER not AUTOSCALING
2016-11-21 16:57:56 -08:00
devin-donnelly 886ca4acdb Merge pull request #1596 from CaoShuFeng/enhance-cni
Add details about loopback cni plugin
2016-11-21 16:54:43 -08:00
devin-donnelly 873cef7109 Merge pull request #1615 from linfan/master
Add limitation note of using host-port
2016-11-21 16:49:32 -08:00
devin-donnelly fb38685529 Merge pull request #1617 from mkulke/adjust-node-hostname-docs
Updated the NodeHostname entry.
2016-11-21 16:49:07 -08:00
devin-donnelly 7c86da9e9a Merge pull request #1642 from travissalascox/master
Update dns.md
2016-11-21 16:39:22 -08:00
devin-donnelly c3de6fa5e7 Merge pull request #1700 from chrismarino/chrismarino-patch
Invalid characters
2016-11-21 14:47:46 -08:00
devin-donnelly ca7e03fd77 Merge pull request #1714 from bacongobbler/rbac-move-superuser-flag
move "Privilege Escalation Prevention and Bootstrapping closer
2016-11-21 14:47:11 -08:00
Jared 3dc6120e8e Merge branch 'master' into adjust-node-hostname-docs 2016-11-21 14:33:26 -08:00
devin-donnelly 0d3e850b0c Merge pull request #1738 from ahmetalpbalkan/patch-6
Fix code block rendering issue
2016-11-21 14:22:56 -08:00
Jared bd02d27d11 Merge branch 'master' into patch-2 2016-11-21 14:21:11 -08:00
devin-donnelly ab80f27df2 Merge pull request #1742 from caseydavenport/update-calico-links
Update Calico links to new docs
2016-11-21 14:15:42 -08:00
Jared 1e1db181e1 Merge branch 'master' into patch-2 2016-11-21 14:07:47 -08:00
Jared a2dff8d479 Add TOC 2016-11-21 14:07:09 -08:00
Jared ae49f9ec3f Merge branch 'master' into patch-2 2016-11-21 13:59:07 -08:00
Jared cf5d62be14 Merge branch 'master' into front-proxy 2016-11-21 13:59:03 -08:00
Jared 3797f7015f Update Weave Link 2016-11-21 13:29:52 -08:00
Jared 2f0347a4b5 Merge branch 'master' into adjust-node-hostname-docs 2016-11-21 13:27:28 -08:00
Jared 53cd650dc0 Merge branch 'master' into patch-2 2016-11-21 13:27:20 -08:00
Jared 261403297f Merge branch 'master' into front-proxy 2016-11-21 13:27:17 -08:00
chrismarino ce2e9950fc Merge branch 'master' into chrismarino-patch 2016-11-21 13:27:09 -08:00
Jared be9878bd41 Merge branch 'master' into kubenet-note 2016-11-21 12:13:48 -08:00
Jared 4b198e0995 Merge branch 'master' into dns-troubleshooting 2016-11-21 11:43:19 -08:00
Seth Jennings fb8062ec66 Merge branch 'master' into fix-autoscaler-doc 2016-11-21 10:37:21 -06:00
CaoShuFeng 0e5ded3a91 Merge branch 'master' into enhance-cni 2016-11-21 01:04:37 -06:00
Casey Davenport 27d7d4fba3 Update Calico links to new docs 2016-11-20 17:14:33 -05:00
Ahmet Alp Balkan 083f07af4a Fix code block rendering issue
Added an extra new line before triple-backtick for proper rendering on the website.
2016-11-19 18:27:18 -08:00
Casey Davenport a8e129af83 Sort network plugins alphabetically. (#1583) 2016-11-19 14:52:21 -08:00
Matthew Fisher fdf250f86e move "Privilege Escalation Prevention and Bootstrapping closer
This way users don't have to read to the bottom to realize they need to add
--authorization-rbac-super-user=admin to their cluster when bootstrapping for the first time.

🐑
2016-11-17 13:05:45 -08:00
Seth Jennings 5077db9a8b Merge branch 'master' into fix-autoscaler-doc 2016-11-16 14:11:30 -06:00
chrismarino 087f5fbbc5 Invalid characters
Invalid character prevented this page from rendering properly.
2016-11-16 08:11:48 -08:00
chrismarino 0bb20de3a4 Fix broken link by removing invalid characters.... (#1605)
* Fix broken link by removing invalid characters....

The link to this page is broken because of invalid characters introduced with PR #1549.

* Update networking.md
2016-11-16 06:39:54 +01:00
Tim Hockin f855c8a599 Merge branch 'master' into master 2016-11-15 09:20:51 +01:00
Janet Kuo f8eb5f1037 Merge branch 'master' into fix-autoscaler-doc 2016-11-14 14:02:32 -08:00
TRAVIS ALLEN SALAS COX 215dca8e8b Update dns.md
This should at least fix a broken link referenced in [#1640](https://github.com/kubernetes/kubernetes.github.io/issues/1640). Looks like a lot of information was taking out of [this](https://github.com/kubernetes/kubernetes/tree/master/build-tools/kube-dns) README.md recently, if you'd like i can delete the reference section completely if it is out of date and/or no longer needed.
2016-11-07 13:27:27 -06:00
Lucas Käldström 05f67bad8f Update the kubeadm documentation to reflect the new release 2016-11-06 15:29:11 -08:00
Magnus Kulke 38385006ef Fixed spelling 2016-11-04 13:56:13 +01:00
CaoShuFeng 9a20eb9329 Merge branch 'master' into enhance-cni 2016-11-04 13:41:32 +08:00
Fan Lin 47b59475cc Add limitation note of using host-port 2016-11-04 09:03:48 +08:00
Magnus Kulke 0a8408081c Updated the NodeHostname entry. 2016-11-03 20:28:51 +01:00
Dominic001 4641c5f602 Merge branch 'master' into patch-2 2016-11-03 11:37:36 +01:00
devin-donnelly 28925a0620 Merge pull request #1580 from caseydavenport/fix-calico-kubeadm-links
Update Calico add-on link
2016-11-02 15:18:01 -07:00
devin-donnelly aa995dded1 Merge pull request #1546 from soltysh/update_api_reference
Updated imported docs with ./update-imported-docs.sh
2016-11-02 15:16:39 -07:00
deads2k c01dcf1a94 document authenticating proxy: 2016-11-01 08:42:59 -04:00
Cao Shufeng 68f8244507 Add details about loopback cni plugin
This change provide a href to users, so that users knowns where to
download this loopback cin plugin. And a more accurate link about
cni configuration file is provided.
2016-11-01 05:57:43 -04:00
Dominic001 f6f0da2f9a more generic patch
use kubectl exec command so we dont have to worry about container type
2016-10-29 01:48:34 +02:00
Dominic001 f83b95234a more explicit etcdctl description
assuming that kubernetes is almost always used with docker. In case other container solutions as lxc are integrated this section
will need further revision. Just using the bare etcl command is a bit too less, at least there should be a hint that you log in into the container.
2016-10-28 22:49:17 +02:00
Zihong Zheng b72518e69c Add troubleshooting section to kube-dns readme 2016-10-28 09:39:32 -07:00
Casey Davenport 4ba092ae12 Update Calico add-on link 2016-10-28 08:46:27 -07:00
Maciej Szulik 541ca2c426 Small corrections how to curl eviction endpoint 2016-10-28 11:47:29 +02:00
Maciej Szulik b506e647f3 Updated imported docs with ./update-imported-docs.sh 2016-10-28 11:28:17 +02:00
Bryan Boreham 3f8d2817ce Merge branch 'master' into kubenet-note 2016-10-25 10:26:30 +01:00
Chris Marino 08d1ecd1df Kubeadm consistency 2016-10-24 16:25:58 -07:00
Chris Marino 0bfafbf6a8 Markdown error... 2016-10-24 16:22:55 -07:00
Chris Marino 2232e063aa Edits for consistency..
Kubeadmin, etc.
2016-10-24 16:00:28 -07:00
chrismarino 677699245e Merge branch 'master' into master 2016-10-24 10:01:27 -07:00
Joe Beda 71de608f4d Document kubeadm evn variables 2016-10-24 09:41:39 -07:00
Joe Beda e21ed27c58 Document kubeadm automation. 2016-10-24 09:41:39 -07:00
chrismarino b62a718bca Merge branch 'master' into master 2016-10-24 09:27:22 -07:00
Chris Marino 59d40b3e81 Merge remote-tracking branch 'refs/remotes/kubernetes/master' 2016-10-24 08:23:03 -07:00
Chris Marino 56a8e8bafc Minor content re-org, edits 2016-10-24 08:22:02 -07:00
Devan Goodwin 4fd44b1604 Document kubeadm --skip-preflight-checks. 2016-10-24 11:50:34 -03:00
Bryan Boreham f5ca6fae32 Update documentation about CNI flags and requirements (#1516)
* Update CNI kubelet option names

* Expand the minimum CNI requirements
2016-10-21 19:19:06 -07:00
Chris Marino d8688fa817 Add Romana to docs
ToC, and kubeadm page
2016-10-21 13:32:29 -07:00
Seth Jennings 98a4b521fd AUTOSCALER not AUTOSCALING 2016-10-20 10:46:51 -05:00
Bryan Boreham 4f0d6c1609 Adjust wording per review comments 2016-10-20 09:48:17 +01:00
Feynman Liang 8cab01acfa Merge branch 'master' into patch-1 2016-10-17 20:02:35 -07:00
devin-donnelly 7598df1a94 Merge pull request #1425 from bobbytables/patch-1
Fix code fencing for DNS validation example
2016-10-17 16:37:34 -07:00
Feynman Liang 1480754235 Correct typo in authorization header 2016-10-17 15:58:45 -07:00
devin-donnelly 20028937ab Merge pull request #1454 from pabloguerrero/patch-3
Update index.md
2016-10-17 14:53:13 -07:00
Kami Gerami 3ef9c7e526 34613 404 Not Found on links referring to /docs/user-guide/kubectl/kubectl/
Changed all links referring to kubectl from /docs/user-guide/kubectl/kubectl/ to /docs/user-guide/kubectl/
2016-10-16 13:39:43 +02:00
Pablo Guerrero 8f41a65a40 Update index.md 2016-10-13 14:43:48 +02:00
Lucas Käldström 23d7719663 Move kubeadm reference, add a navigation link to it and assignees 2016-10-11 09:01:12 +03:00
Robert Ross ced57785df Fix code fencing for DNS validation example 2016-10-10 19:39:14 -04:00
devin-donnelly 99e12c694a Merge pull request #1303 from MikeSpreitzer/updoc1
Clarified remark about authorizers determining groups
2016-10-10 15:39:58 -07:00
Mike Spreitzer 12f5e30309 Removed confusing remark about authorizers determining groups
The old text said that the authorizer is expected to determine group
memberships when the authenticator does not.  This not true.  It is
allowed, but not expected --- and none of the standard authorizers do
it.  I tried composing a brief correct statement about this, but the
reviews were mainly aghast that internal details of some non-standard
authorizers were being injected into the discussion of authentictors.
I decided that the better part of valor is simply to delete the whole
topic from here.  Besides, it is a conclusion that any reader would
normally draw --- since there is no statement forbidding it (nor
indeed any indication that there might be a reason to forbid it), any
reader would naturally conclude that an authorizer is free to derive
additional intermediate information of any sort and in any way it
likes.
2016-10-09 15:28:31 -04:00
Mike Spreitzer 30a8b4724f Clarified the apiGroup identified by empty string
Noted this where the relevance of api group is introduced, and
corrected the reference to what the empty string means ("core" api
group, which is the terminology used in the page that introduces api
group, rather than the old text "default").
2016-10-06 21:31:46 -07:00
devin-donnelly 35e25311b5 Merge pull request #1144 from adieu/format
Some small style tweaks to make pandoc working
2016-10-05 15:44:26 -07:00
devin-donnelly 49c83f4d12 Merge pull request #1251 from philips/add-details-from-dns-docs
admin: dns: merge from the build dir
2016-10-05 15:06:29 -07:00
devin-donnelly 6d5580590a Merge pull request #1332 from InQuicker/client-cert-groups
Explain how to define group memberships with client cert authentication.
2016-10-05 14:24:53 -07:00
devin-donnelly 15ada05bb7 Merge pull request #1333 from InQuicker/rbac-subresource
Document subresources in RBAC.
2016-10-05 14:19:58 -07:00
Jordan Liggitt 19e61ec1d6
Describe anonymous access, system:authenticated group 2016-10-05 13:11:37 -04:00
Mike Spreitzer 49c0ed7680 Merge branch 'master' into updoc3 2016-09-30 23:05:47 -04:00
Tim St. Clair 5eff46b035
Fix links to AppArmor policy references 2016-09-30 11:13:07 -07:00
Brandon Philips 8aa10a6fda admin: dns: merge from the build dir
Try and clean this mess up where the build dir has user facing docs and move them here.

Ref: https://github.com/kubernetes/kubernetes/pull/32931
2016-09-28 15:40:53 -07:00
Bryan Boreham c8abb1c5f8 Clarify what kubenet does and does not do 2016-09-28 16:58:31 +01:00
Jimmy Cuadra 19e65e224a Document subresources in RBAC. 2016-09-27 21:30:08 -07:00
Jimmy Cuadra 777e234970 Explain how to define group memberships with client cert authentication. 2016-09-27 17:43:34 -07:00
Mike Spreitzer fa44441f68 Noted HTTP syntax restriction on bearer tokens
Noted that every bearer token, in any of the four authentication
strategies that use bearer tokens, appears in an HTTP header
value without additional quotation/encoding (beyond that supported
by HTTP).  Included a fully concrete example.  Wrote this down once,
where the issue first arises, and referenced it from the other relevant
strategies.

This constraint was elicited in #sig-auth discussion
on Sep 21, and not previously stated explicitly and in a way that
clearly applied to all four kinds of bearer token --- leaving the
reader to wonder if some other encoding is expected.
2016-09-27 16:13:10 -04:00
adieu c42b866ad2 Minor style tweaks. 2016-09-27 17:12:02 +08:00
adieu 838352ff6e Change files in dos format to unix format. Removing ^M. 2016-09-27 17:12:02 +08:00
devin-donnelly ff54de9ae0 Merge pull request #1125 from erictune/rbacgroupref
How to refer to rervice account groups in RBAC
2016-09-26 13:25:14 -07:00
devin-donnelly 53f0dbbe8a Merge pull request #1259 from chmouel/patch-1
minor spelling update
2016-09-26 13:16:05 -07:00
devin-donnelly 971f6a44e7 Merge pull request #549 from mwhooker/patch-1
mark node phase as deprecated
2016-09-26 10:35:35 -07:00
devin-donnelly 98eaa04dc6 Merge pull request #1070 from justinsb/network_plugin_mtu
Document `network-plugin-mtu` option
2016-09-26 10:35:16 -07:00
devin-donnelly 778c119835 Merge pull request #1265 from lukemarsden/master
[WIP] kubeadm and add-on docs
2016-09-26 10:31:43 -07:00
Eric Tune 3750c217ec How to refer to rervice account groups in RBAC 2016-09-26 10:21:27 -07:00
Luke Marsden 10884384de kubeadm and add-ons docs 2016-09-26 14:12:02 +01:00
David Oppenheimer 4a85d6255e Clarify minAvailable approval semantics 2016-09-25 21:30:13 -07:00
Devin Donnelly f4457ae677 Merge remote-tracking branch 'origin' into release-1.4 2016-09-23 16:57:30 -07:00
devin-donnelly 795df8d03e Merge pull request #1276 from madhusudancs/fed-new-deployment
Update the federation admin guide to use the new, simplified deployment mechanism.
2016-09-23 09:55:01 -07:00
Luke Marsden 22a8dbb58e Squashed commits for kubeadm and addons docs. 2016-09-23 14:26:26 +01:00
Madhusudan.C.S 78dccc0366 Address more review comments. 2016-09-22 11:05:18 -07:00
Chmouel Boudjnah d322b78c53 minor spelling update
using mispellings https://pypi.python.org/pypi/misspellings
2016-09-22 11:48:21 +02:00
Madhusudan.C.S af2976b665 Address review comments. 2016-09-22 01:53:56 -07:00
devin-donnelly f2465eec29 Merge pull request #1158 from pallavagarwal07/patch-1
Fix link to kubectl from docs/user-guide/kubectl/kubectl_version.md
2016-09-21 16:28:25 -07:00
devin-donnelly f5e6c1d47b Merge pull request #1196 from derekwaynecarr/disk-eviction
Add documentation for disk based eviction
2016-09-21 15:08:09 -07:00
derekwaynecarr e26aa12e23 Add documentation for disk based eviction 2016-09-21 16:38:35 -04:00
Madhusudan.C.S 80f4dc45fe Update the federation admin guide to use the new, simplified deployment mechanism. 2016-09-20 22:45:55 -07:00
devin-donnelly 3720dcf50d Merge pull request #1246 from calebamiles/release-1.4
Adds documentation for TLS bootstrapping
2016-09-20 13:26:38 -07:00
devin-donnelly 67fb7451ef Merge pull request #1244 from mml/disruption
Add disruption admin guide.
2016-09-20 13:24:08 -07:00
caleb miles d000e77921 Updates docs for TLS bootstrapping.
...now with less passive voice
2016-09-20 09:23:23 -07:00
caleb miles 1cebef8da4 Adds documentation for TLS bootstrapping
Documents workflow for using experimental kublet TLS bootstrapping enabled by https://github.com/kubernetes/features/issues/43
2016-09-20 09:23:23 -07:00
devin-donnelly eacdf9f230 Merge pull request #1213 from markturansky/branch_docs_add
Added pvc quota to docs
2016-09-19 14:57:22 -07:00
Matt Liggett 1117f1a5a6 Add disruption admin guide. 2016-09-19 13:23:40 -07:00
devin-donnelly 56de4ad1e5 Merge pull request #1170 from piosz/rescheduler
Added Rescheduler documentation
2016-09-16 11:08:33 -07:00
markturansky dd8133f716 added pvc quota to docs 2016-09-16 11:39:03 -04:00
Piotr Szczesniak ebd9318f37 Added Rescheduler documentation 2016-09-16 17:02:23 +02:00
Kazuki Suda ef8229f2c6 Fix broken link in the authorization page 2016-09-16 16:23:14 +09:00
Devin Donnelly e0cde221b4 Merge remote-tracking branch 'origin' into release-1.4 2016-09-15 14:40:22 -07:00
devin-donnelly b423faa548 Merge pull request #1188 from ecordell/imagepolicy-webhook-docs
Add ImagePolicyWebhook docs
2016-09-15 14:34:25 -07:00
devin-donnelly e61d5ec4d4 Merge pull request #1216 from Random-Liu/add-node-conformance-test-doc
Add document for node conformance test.
2016-09-15 13:32:55 -07:00
Lantao Liu d56e805a68 Add document for node conformance test. 2016-09-15 11:06:39 -07:00
deads2k 251a6a55f8 describe subjectaccessreview 2016-09-15 13:01:08 -04:00
Pallav Agarwal 36fefcf873 Correct broken links - fix #1154, fix #1161, fix #1162, fix #1163
Fix some broken links in documentation, as well as add a dummy page
for single-node docker with deprecation notice to prevent error with
old links.
2016-09-15 17:26:29 +05:30
devin-donnelly df247395df Merge pull request #1147 from timstclair/aa-docs-1.4
AppArmor documentation
2016-09-14 16:31:07 -07:00
devin-donnelly a380440506 Revert "describe subjectaccessreview" 2016-09-14 14:09:32 -07:00
devin-donnelly ac43058e66 Merge pull request #1219 from deads2k/sar-01
describe subjectaccessreview
2016-09-14 14:08:43 -07:00
deads2k 426b81a497 describe subjectaccessreview 2016-09-14 16:03:05 -04:00
Tim St. Clair 05b2829c7c
AppArmor documentation 2016-09-14 12:49:41 -07:00
Maciej Szulik 78091516e8 Add audit doc 2016-09-14 11:10:55 +02:00
devin-donnelly 4a265eb8e6 Merge pull request #1211 from cjcullen/true
Remove `=true` from gcloud commands
2016-09-13 15:34:31 -07:00
Eric Chiang ec9f1aedc9 docs/admin/authentication: explicitly state the OIDC id_token is used instead of the access_token
Most OAuth2 libraries use the access_token as a bearer token. This
is different for Kubernetes, since the OIDC plugin uses an id_token
instead (also returned in the token response).

Be explicit and call out this difference.
2016-09-13 09:07:52 -07:00
Jan Safranek 93df436435 Add documentation about DefaultStorageClass plugin. 2016-09-13 10:02:17 +02:00
devin-donnelly c11c1f8b04 Merge pull request #1195 from gmarek/nodecontroller1.4
update Node admin doc
2016-09-12 14:58:42 -07:00
Evan Cordell 095f9d436e Add ImagePolicyWebhook docs 2016-09-12 15:26:21 -04:00
CJ Cullen ef63728e62 Remove `=true` from gcloud commands 2016-09-12 11:01:10 -07:00
gmarek 99f7d6d2f1 update Node admin doc 2016-09-12 12:01:02 +02:00
devin-donnelly 27dc318066 Merge pull request #1182 from sttts/sttts-admin-sysctls-1.4
Add docs/admin/sysctls.md
2016-09-09 14:18:18 -07:00
Devin Donnelly 502c2fe184 Merge remote-tracking branch 'origin' into release-1.4 2016-09-08 16:39:34 -07:00
Devin Donnelly 301a3e4da9 Merge branch 'master' into release-1.4 2016-09-08 16:11:25 -07:00
Dr. Stefan Schimanski fe11f5b9b7 Add docs/admin/sysctls.md 2016-09-08 11:59:21 +02:00
devin-donnelly e035d83836 Merge pull request #1166 from ingvagabund/generalize-fedora-steps-for-statis-pods
remove specific Fedora and Kubernetes version when describing configuration
2016-09-07 16:40:26 -07:00