5bc26c7ff3
Merge pull request #47404 from aleskandro/patch-1
...
Clarify expiration time for service accounts and tokens of pods pending deletion despite finalizers
2024-08-14 01:15:56 -07:00
300519c850
Apply suggestions from code review
...
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2024-08-09 10:06:32 -04:00
45aa0d800a
Clarify expiration time for service accounts and tokens of pods pending deletion despite finalizers
...
Refers #47403
Signed-off-by: aleskandro <aleskandro@redhat.com>
2024-08-09 09:46:08 -04:00
c2ab3112f1
Merge main into dev-1.31 to keep in sync
2024-08-05 11:47:31 -04:00
d77111d096
Remove beta pre-requisites
...
With 1.30 stable, the feature does not need to be enabled and the v1beta1 API group is not needed.
2024-08-01 09:08:20 +02:00
ee1fa4340f
Merge pull request #46544 from my-git9/pt-10139
...
improve format for bootstrap-tokens certificate-signing-requests
2024-07-31 22:08:06 -07:00
7215e3919f
improve format for bootstrap-tokens certificate-signing-requests
...
Signed-off-by: xin.li <xin.li@daocloud.io>
2024-07-30 19:59:39 +08:00
ce56779401
Merge pull request #45466 from tuladhar/improve-rbac-doc
...
Improve RBAC document with correct references to cluster role binding
2024-07-30 02:18:52 -07:00
5dab30d474
KEP-4601: alpha docs
2024-07-26 23:27:51 -04:00
a77fcc771b
Merge pull request #46988 from vinayakankugoyal/kep4633
...
KEP-4633: Add documentation for Configurable Endpoints for Anonymous Auth.
2024-07-23 19:54:11 -07:00
7e90855773
Merge pull request #47246 from haircommander/container_engine_t-1.31
...
PSS: add container_engine_t to allowed list of selinux types
2024-07-23 16:14:17 -07:00
06aff012a2
PSS: add container_engine_t to allowed list of selinux types
...
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-07-23 12:19:14 -04:00
ebd7ff0b64
Merge pull request #47234 from salaxander/merged-main-dev-1.31
...
Merged main dev 1.31
2024-07-22 16:20:03 -07:00
c079d3a7cd
Merge pull request #47184 from salaxander/merged-main-dev-1.31
...
Merged main dev 1.31
2024-07-18 00:06:01 -07:00
1f9b4761a2
Merge pull request #47193 from rodrigc/certificatesigningrequest-link
...
Add links to CertificateSigningRequest API
2024-07-18 00:02:07 -07:00
2aa8266591
Merge pull request #47121 from micahhausler/csr-node-clarification
...
Clarify kubelet serving and client cert CN values
2024-07-17 23:53:52 -07:00
8e59b9f392
Update certificate-signing-requests.md
2024-07-18 14:52:26 +08:00
a55b1057be
Add links to CertificateSigningRequest API
...
Signed-off-by: Craig Rodrigues <rodrigc@crodrigues.org>
2024-07-17 20:41:13 -07:00
80d2f96c93
Update extensible-admission-controllers.md
...
fix typo
2024-07-16 13:26:09 -04:00
a2ca418a9a
Clarify kubelet serving and client cert CN values
...
Signed-off-by: Micah Hausler <mhausler@amazon.com>
2024-07-09 08:27:50 -07:00
4b2940eb26
KEP-4633: Add documentation for Configurable Endpoints for Anonymous Auth.
...
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
2024-06-29 06:48:39 +00:00
a7fe6cf8c5
Update content/en/docs/reference/access-authn-authz/rbac.md
...
Co-authored-by: Junya Okabe <86868255+Okabe-Junya@users.noreply.github.com>
2024-06-28 15:48:33 +05:45
56d3c640f8
Merge pull request #46809 from hacktivist123/merged-main-dev-1.31
...
Merged main dev 1.31
2024-06-13 22:43:26 -07:00
c05e239c86
Merge pull request #44643 from T-Lakshmi/rbac
...
Reworded 'beyond discovery permissions' wording in "Using RBAC Authorization" page
2024-06-11 09:48:44 -07:00
d989445929
resolved conflict as discussed, accepted current change with CRICTL_VERSION=v1.31.0
2024-06-03 18:26:28 -04:00
ea91c4b588
clean up access-authn-authz/authentication.md
2024-05-26 21:05:31 +08:00
e941a6ab1d
Merge main into dev-1.31 to keep in sync
2024-05-22 16:16:00 +01:00
8201801a97
Fixing heading in authorization.md
...
Signed-off-by: vijaynag-bs <vijaynag.bs@gmail.com>
2024-05-12 14:28:59 +05:30
8c773b2e31
update PersistentVolumeLabel admission plugin
2024-05-10 11:40:49 +08:00
8a122ff9ca
Fix page title
...
Omit “Overview” to match the authentication topic.
2024-04-23 01:42:43 +01:00
5fdccf9f2f
Revise advice about authz modes
2024-04-23 01:42:42 +01:00
f833f4f671
Revise authz page
...
Improve how we explain authz, and remove some existing duplication.
Co-Authored-By: Rita Zhang <rita.z.zhang@gmail.com>
2024-04-23 01:42:20 +01:00
9f327512c6
Reorder authn/authz pages
...
Group topics together, in order of how these happen within Kubernetes'
API server's processing chain (authn, then authz, then admission
control).
2024-04-23 01:42:18 +01:00
37b0b3ed72
Merge remote-tracking branch 'upstream/main' into dev-1.30
2024-04-10 23:04:57 +05:30
ba458ace13
Add certificateAuthority in structured authn docs
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-04-09 14:31:37 -07:00
cdf1ed1236
Merge remote-tracking branch 'upstream/main' into dev-1.30
...
Merge main into dev-1.30 to keep in sync
2024-04-02 10:05:03 -04:00
00d526659e
Make KEP-4193 documentation updates ( #45292 )
...
* KEP-4193: beta documentation updates
* Apply suggestions from code review
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
* Apply suggestions from code review
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
* include example JTI and node-name/uid output
* Update service-accounts-admin.md
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
---------
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
2024-03-26 13:45:05 -07:00
3ef1d0bb84
Fix docs for authentication: s/errors/error
2024-03-24 09:56:05 -07:00
864ac8bec6
Merge pull request #45108 from aramase/aramase/d/kep_3331_beta_docs
...
Add docs for Structured Authn beta
2024-03-24 03:08:39 -07:00
c4e3177ff3
Add feature gate metadata for structured authz config
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-19 14:02:50 -07:00
b35e434193
Add docs for Structured Authn beta
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-19 13:51:32 -07:00
c889d9b251
Add metadata to use mechanism for API reference links
2024-03-14 14:50:24 +00:00
0f8e1fadea
Merge pull request #45249 from cici37/3488
...
[KEP-3488]Promoting ValidatingAdmissionPolicy to GA
2024-03-12 17:05:49 -07:00
b8514fcb5e
Merge pull request #45138 from ritazh/kep_3221_beta_docs
...
Add docs for Structured Authz beta
2024-03-12 10:59:04 -07:00
4bffa3c7fa
Mark feature AdmissionWebhookMatchConditions to stable in 1.30
2024-03-12 10:14:31 -07:00
0fc8d236e0
Promote ValidatingAdmissionPolicy to GA
2024-03-11 22:48:54 +00:00
a556984b94
Add docs for Structured Authz beta
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2024-03-11 08:27:41 -07:00
a66d974f1a
Improve
2024-03-08 00:49:02 +05:45
e1465e035a
Merge remote-tracking branch 'upstream/main' into dev-1.30
2024-02-20 11:46:04 +01:00
e4731338d3
Switch some feature-state shortcodes to be data driven
...
When the feature gates graduate (or get deprecated), the associated
shortcode will update automatically.
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
2024-02-16 12:49:31 +00:00
Kubernetes Prow Robot
Alessandro Di Stefano
Daniel Chan
Gergely Nagy
xin.li
Jordan Liggitt
Peter Hunt
Qiming Teng
Craig Rodrigues
David Xia
Micah Hausler
Vinayak Goyal
Puru
Michael
Oluebube Princes Egbuna
vijaynag-bs
carlory
Tim Bannister
Rita Zhang
Vyom-Yadav
Anish Ramasekar
James Munnelly
Dipesh Rawat
Igor Velichkovich
cici37