Commit Graph

47 Commits (ff6d646409052bc001ae101faf1ca2817fbf9392)

Author SHA1 Message Date
Tim Bannister 163fd2769a
Update example YAML in encryption-at-rest topic 2023-06-10 09:53:36 +01:00
Kubernetes Prow Robot 792a63ef7a
Merge pull request #41196 from sftim/20230517_revise_encryption_at_rest
Replace ASCII art arrows in comments
2023-05-17 15:24:33 -07:00
Tim Bannister 49d0568a06 Split out advice about config reloads for encryption at rest 2023-05-17 21:33:29 +01:00
Tim Bannister 1f762d0403 Replace ASCII art arrows in comments
Plain comments work just as well.
2023-05-17 20:10:05 +01:00
Tim Bannister aec678e64a Revise API resource encryption at rest introduction
- Change page title (you can encrypt more than Secrets)
- Revise prerequisites
2023-05-10 13:20:33 +01:00
Tim Bannister fac97a1947 Fix sort order for at-rest API encryption providers
List "identity" first, then other providers alphabetically.
2023-04-29 21:47:14 +01:00
Tim Bannister e3720c7fd3 Switch to HTML table
Replace the existing Markdown table with a more complex table that is
not easy to express in Markdown - and for that reason, use HTML.

This relies on custom style support to render well, but can work OK even
with default Docsy styling.
2023-04-29 21:47:09 +01:00
Kubernetes Prow Robot 2da2c6c277
Merge pull request #40407 from mickeyboxell/merged-main-dev-1.27
Merged main dev 1.27
2023-03-31 21:49:49 -07:00
Rita Zhang cb656b40c2
Add docs to accompany KMS v2beta1 changes (#39110)
* Tracking commit for v1.27 docs

* feat: KMS v2beta1

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

---------

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
Co-authored-by: carolina valencia <krol3@users.noreply.github.com>
2023-03-30 23:21:49 -07:00
Mickey Boxell a15fa4ae31 Merge remote-tracking branch 'upstream/main' into dev-1.27 2023-03-29 15:54:33 -05:00
Kubernetes Prow Robot f0c2c17e4b
Merge pull request #39897 from nilekhc/encrypt-all-docs
[KMSv2] docs: updates EncryptionConfiguration doc to add wildcard support to encrypt all resources.
2023-03-23 12:08:31 -07:00
Kubernetes Prow Robot d63f7618a1
Merge pull request #39876 from bradreelee/patch-1
Update encrypt-data.md
2023-03-23 03:00:32 -07:00
Nilekh Chaudhari 1054d0bcc7 docs: updates EncryptionConfiguration doc to add wildcard support to encrypt all resources.
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
2023-03-13 23:39:06 +00:00
bradreelee d6b5d843c3
Update encrypt-data.md 2023-03-13 20:07:39 +09:00
bradreelee 2774ec1ffe
Update content/en/docs/tasks/administer-cluster/encrypt-data.md
Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
2023-03-13 10:29:10 +09:00
Craig Box 46bf59d941 Shortcode fixes for en 2023-03-13 10:50:13 +13:00
bradreelee 00078b40dc
Update encrypt-data.md
Added missing closing parentheses in line 70
2023-03-09 20:19:21 +09:00
Abigail McCarthy b1202c78ff Update page weights in /tasks/administer-cluster section 2023-01-11 11:12:34 -05:00
Michael d8e90b4c6b Fix punctuations in headings of encrypt-data.md 2022-12-19 09:34:59 +08:00
Kubernetes Prow Robot 98973fdcba
Merge pull request #38137 from nilekhc/kms-docs
kms: updates website to document encryption config hot reload changes
2022-12-06 05:24:36 -08:00
Nilekh Chaudhari d132365aae kms: updates website to document --encryption-provider-config-automatic-reload api server flag and healthcheck endpoint behavior
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
2022-12-01 19:05:18 +00:00
Rita Zhang 765de36b1d
Document custom resource encryption support (#38109)
* Add custom resource encryption support

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

* Address review comments

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

* Update reviewer list

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

* Add wrapping

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

* Address comments

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

* Address comments

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

* Address comments

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

* Address comments

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2022-11-29 19:18:55 -08:00
Stefan Lasiewski 72c0fa664b
Update content/en/docs/tasks/administer-cluster/encrypt-data.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2022-11-22 15:18:03 -08:00
Stefan Lasiewski ef7fef5812
Verify key name in API Server and in etcd
Sometimes the key may not match due to bugs or human error
2022-11-01 14:26:10 -07:00
The Tran 4e4862d5da
Improve “Encrypting Secret Data at Rest” page (#35425)
* Improve “Encrypting Secret Data at Rest” page

* Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* separate commands from sample output

* Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>
2022-09-21 17:59:08 -07:00
Rita Zhang f367ff60e1
feat: KMS v2alpha1
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2022-08-16 17:32:01 -07:00
Shubham Kuchhal f608a7c4c8 Added Hyperlink to PKCS#7. 2022-05-30 16:21:13 +05:30
Qiming Teng 3e58334b07 Add configuration reference for API server encryption 2022-02-10 11:27:52 +08:00
Viacheslav Vasilyev 241e635197
Update content/en/docs/tasks/administer-cluster/encrypt-data.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2022-02-01 15:31:21 +02:00
Viacheslav Vasilyev ddd4a3defb
Update content/en/docs/tasks/administer-cluster/encrypt-data.md
Co-authored-by: Jim Angel <jimangel@users.noreply.github.com>
2022-02-01 12:38:35 +02:00
Viacheslav Vasilyev 0ef0c8d570
Update encrypt-data.md - multi-master configuration notice
Add short notice about multi-cluster configurations
2022-01-18 12:40:37 +02:00
Kubernetes Prow Robot e4e0bf43a8
Merge pull request #29102 from hoskeri/encrypt-data-doc
encrypt-data: Don't recommend AES-CBC
2021-09-30 14:27:15 -07:00
Junaid Ali 2fe20a8ac4
Fix link to decoding a secret 2021-07-27 23:34:13 +01:00
Abhijit Hoskeri ff63695666 encrypt-data: Don't recommend AES-CBC
CBC is not recommended any more due to vulnerability
to padding oracle attacks.

Promote secretbox instead.
2021-07-23 13:03:33 -07:00
Karen Bradshaw ecc27bbbe7 add en pages 2020-06-09 19:33:15 -04:00
Tim Bannister 0cd227897e Highlight note with appropriate shortcode 2020-05-12 19:36:38 +01:00
Tim Bannister 89c99bac81 Fix Markdown for secret encryption at rest
Adapt Markdown for CommonMark / Hugo 0.70.x
2020-05-12 19:35:56 +01:00
Tim Bannister a84463852e
Revise “Encrypting Secret Data at Rest” (#18810)
* Drop reference to old Kubernetes versions

At the time of writing, Kubernetes v1.13 is the oldest supported
version, and encryption-at-rest is no longer alpha.

* Tidy whitespace

* Add table caption

* Set metadata for required Kubernetes version
2020-02-06 13:03:24 -08:00
Maya Kaczorowski a905be0ceb Add recommendation to use kms provider (#13264)
* Add recommendation to use kms provider

Add a warning to encrypting secrets documentation that if using a provider with secrets encryption, kms provider is preferred as it materially changes the threat model.

* Update encrypt-data.md

* Update encrypt-data.md

Updated to include kms provider is Beta sice 1.12

* Update encrypt-data.md
2019-06-10 19:30:16 -07:00
s-ito-ts 5a89ffb684 Fix orders of yaml for tasks/administer-cluster/[a-k]*.go (#14241) 2019-05-08 22:44:47 -07:00
Jim Angel 27b7b453a9 Official 1.13 Release Docs (#11401)
* Update metadata.generation behaviour for custom resources (#10705)

* update docs promoting plugins to beta (#10796)

* docs update to promote TaintBasedEvictions to beta (#10765)

* First Korean l10n work for dev-1.13 (#10719)

* Update outdated l10n(ko) contents (#10689)

fixes #10686

* Translate concepts/overview/what-is-kubernetes in Korean (#10690)

* Translate concepts/overview/what-is-kubernetes in Korean

* Feedback from ClaudiaJKang

* Translate concepts/overview/components in Korean (#10882)

* Translate concepts/overview/components in Korean #10717

* Translate concepts/overview/components in Korean

* Translate concepts/overview/components in Korean

* Apply Korean glossary: 서비스 어카운트

* Translate concepts/overview/kubernetes-api in Korean (#10773)

* Translate concepts/overview/kubernetes-api in Korean

* Applied feedback from ianychoi

* kubeadm: update the configuration docs to v1beta1 (#10959)

* kubeadm: add small v1beta1 related updates (#10988)

* ADD content/zh/docs/reference/setup-tools/kubeadm/kubeadm.md (#11031)

* ADD content/zh/docs/reference/setup-tools/kubeadm/kubeadm.md

* ADD content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_init.md

* Update content/zh/docs/reference/setup-tools/kubeadm/kubeadm.md

Accepted

Co-Authored-By: YouthLab <tsui@highyouth.com>

* do not change 'master' or 'worker' nodes to '主从'

* Doc updates for volume scheduling GA (#10743)

* Doc updates for volume scheduling GA

* Make trivial change to kick build

* Document nodelease feature (#10699)

* advanced audit doc for ModeBlockingStrict (#10203)

* Rename EncryptionConfig to EncryptionConfiguration (#11080)

EncryptionConfig was renamed to EncryptedConfiguration and added to
the `apiserver.config.k8s.io` API group in Kubernetes 1.13.

The feature was previously in alpha and was not handling versions
properly, which lead to an originally unnoticed `v1` in the docs.

* content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md

* trsanlate create-cluster-kubeadm.md to chinese (#11041)

* trsanlate create-cluster-kubeadm.md to chinese

* Update create-cluster-kubeadm.md

* update the feature stage in v1.13 (#11307)

* update new feature gates to document (#11295)

* refresh controller role list on rbac description page (#11290)

* node labeling restriction docs (#10944)

* Update 1.13 docs for CSI GA (#10893)

* dynamic audit documentation (#9947)

* adds dynamic audit documentation

* Copyedit for clarity

See also inline question/s

* Fix feature state shortcode

* Update feature state

* changes wording for dynamic audit flag behavior

* Minor copyedit

* fix dynamic audit yaml

* adds api enablement command to dynamic audit docs

* change ordering dynamic audit appears in

* add references to dynamic audit in webhook backend

* reword dynamic audit reference

* updates stages field for audit sink object

* changes audit sink api definition; rewords policy

* kubeadm: remove kube-proxy workaround (#11162)

* zh-trans content/en/docs/setup/independent/install-kubeadm.md (#11338)

* zh-trans content/en/docs/setup/independent/install-kubeadm.md

* Update install-kubeadm.md

* Update dry run feature to beta (#11140)

* vSphere volume raw block support doc update (#10932)

* Add docs for Windows DNS configurations (#10036)

* Update docs for fields allowed at root of CRD schema (#9973)

* Add docs for Windows DNS configurations

* add device monitoring documentation (#9945)

* kubeadm: adds upgrade instructions for 1.13 (#11138)

* kubeadm: adds upgrade instructions for 1.13

Signed-off-by: Chuck Ha <ha.chuck@gmail.com>

* add minor copyedits

Addressed a couple of copyedit comments a bit more cleanly.

* kubeadm: add improvements to HA docs (#11094)

* kubeadm: add information and diagrams for HA topologies

* kubeadm: update HA doc with simplified steps

* kubeadm: update HA doc with simplified steps

* edit ha, add new topology topic, reorder by weight

* troubleshoot markdown

* fix more markdown, fix links

* more markdown

* more markdown

* more markdown

* changes after reviewer comments

* add steps about Weave

* update note about stacked topology

* kubeadm external etcd HA upgrade 1.13 (#11364)

* kubeadm external etcd HA upgrade 1.13

Signed-off-by: Ruben Orduz <rubenoz@gmail.com>

* Update stacked controlplane steps

* kubeadm cert documentation (#11093)

* kubeadm certificate API and CSR documentation

* copyedits

* fix typo

* PR for diff docs (#10789)

* Empty commit against dev-1.13 for diff documentation

* Complete Declarative maangement with diff commands

* Second Korean l10n work for dev-1.13. (#11030)

* Update outdated l10n(ko) contents (#10915)
* Translate main menu for l10n(ko) docs (#10916)
* Translate tasks/run-application/horizontal-pod-autoscale-walkthrough (#10980)
* Translate content/ko/docs/concepts/overview/working-with-objects/kubernetes-object in Korean #11104 (#11332)
* Pick-right-solution page translates into Korean. (#11340)
* ko-trans: add jd/..., sap/..., ebay/..., homeoffice/... (#11336)
* Translate concept/workloads/pods/pod-overview.md (#11092)

Co-authored-by: June Yi <june.yi@samsung.com>
Co-authored-by: Jesang Myung <jesang.myung@gmail.com>
Co-authored-by: zerobig <38598117+zer0big@users.noreply.github.com>
Co-authored-by: Claudia J.Kang <claudiajkang@gmail.com>
Co-authored-by: lIuDuI <1693291525@qq.com>
Co-authored-by: Woojin Na(Eddie) <cheapluv@gmail.com>

* Rename encryption-at-rest related objects (#11059)

EncryptionConfig was renamed to EncryptedConfiguration and added to
the `apiserver.config.k8s.io` API group in Kubernetes 1.13.

The feature was previously in alpha and was not handling versions
properly, which lead to an originally unnoticed `v1` in the docs.

Also, the `--experimental-encryption-provider-config` flag is now called
just `--encryption-provider-config`.

* Documenting FlexVolume Resize alpha feature. (#10097)

* CR webhook conversion documentation (#10986)

* CR Conversion

* Addressing comments

* Addressing more comments

* Addressing even more comments

* Addressing even^2 more comments

* Remove references to etcd2 in v1.13 since support has been removed (#11414)

* Remove etcd2 references as etcd2 is deprecated

Link back to the v1.12 version of the etcd3 doc for
the etcd2->etcd3 migration instructions.

I updated the kube-apiserver reference manually,
unsure if that is auto-generated somehow.

The federation-apiserver can still potentially
support etcd2 so I didn't touch that.

* Remove outdated {master,node}.yaml files

There are master/node yaml files that reference
etcd2.service that are likely highly out of date.
I couldn't find any docs that actually reference
these templates so I removed them

* Address review comments

* Final Korean l10n work for dev-1.13 (#11440)

* Update outdated l10n(ko) contents (#11425)

fixes #11424

* Remove references to etcd2 in content/ko (#11416)

* Resolve conflicts against master for /ko contents (#11438)

* Fix unopened caution shortcode

* kubeadm: update the reference docs for 1.13 (#10960)

* docs update to promote TaintBasedEvictions to beta (#10765)

* First Korean l10n work for dev-1.13 (#10719)

* Update outdated l10n(ko) contents (#10689)

fixes #10686

* Translate concepts/overview/what-is-kubernetes in Korean (#10690)

* Translate concepts/overview/what-is-kubernetes in Korean

* Feedback from ClaudiaJKang

* Translate concepts/overview/components in Korean (#10882)

* Translate concepts/overview/components in Korean #10717

* Translate concepts/overview/components in Korean

* Translate concepts/overview/components in Korean

* Apply Korean glossary: 서비스 어카운트

* Translate concepts/overview/kubernetes-api in Korean (#10773)

* Translate concepts/overview/kubernetes-api in Korean

* Applied feedback from ianychoi

* kubeadm: update the configuration docs to v1beta1 (#10959)

* kubeadm: add small v1beta1 related updates (#10988)

* update new feature gates to document (#11295)

* Update dry run feature to beta (#11140)

* kubeadm: add improvements to HA docs (#11094)

* kubeadm: add information and diagrams for HA topologies

* kubeadm: update HA doc with simplified steps

* kubeadm: update HA doc with simplified steps

* edit ha, add new topology topic, reorder by weight

* troubleshoot markdown

* fix more markdown, fix links

* more markdown

* more markdown

* more markdown

* changes after reviewer comments

* add steps about Weave

* update note about stacked topology

* kubeadm: update reference docs

- add section about working with phases under kubeadm-init.md
- update GA / beta status of features
- kubeadm alpha phase was moved to kubeadm init phase
- new commands were added under kubeadm alpha
- included new CoreDNS usage examples

* Generate components and tools reference

* Add generated federation API Reference (#11491)

* Add generated federation API Reference

* Add front matter to federation reference

* Remove whitespace from federation front matter

* Remove more whitespace from federation front matter

* Remove superfluous kubefed reference

* Add frontmatter to generated kubefed reference

* Fix kubefed reference page frontmatter

* Generate kubectl reference docs 1.13 (#11487)

* Generate kubectl reference docs 1.13

* Fix links in kubectl reference

* Add 1.13 API reference (#11489)

* Update config.toml (#11486)

* Update config.toml

Preparing for 1.13 release, updating the config.toml and dropping the 1.8 docs reference.

* update dot releases and docsbranch typo

* adding .Site. to Params.currentUrl (#11503)

see https://github.com/kubernetes/website/pull/11502 for context

* Add 1.13 Release notes (#11499)
2018-12-03 17:21:11 -08:00
adisky b82bf96203 Redirect to decoding a secret (#10594)
In this Document Encrypting Secret data at REST, the example to verify
decrypt secret is bit confusing, on running
$ kubectl describe secret secret1 -n default
"should match mykey: mydata" never match because data is enoded,
This commit redirects it to decoding the secret
2018-11-18 18:40:10 -08:00
Luc Perkins d65e1790ff Add admonition type to shortcode (#9482)
* Change existing admon blocks

* Fix includes issue
2018-11-06 11:33:04 -08:00
chenDT e6611e3100 Fix some "capture prerequisites" errors in docs/tasks. (#10270)
Multiple "capture prerequisites" can only display the last one, so we need to
merge multiple "capture prerequisites".
2018-10-11 14:21:04 -07:00
Luc Perkins bb818a9b41 Make macOS standard usage (#9422) 2018-07-18 15:12:16 -07:00
Steve Perry 75f00dfc60 Apply templates to all concepts and tasks to fix double bullets in TOC (#9149)
* Apply concept template to fix double bullet issue.

* Apply concept template

* Apply templates to tasks
2018-06-22 11:20:04 -07:00
Bjørn Erik Pedersen 7f3b633aa0 Convert site to Hugo (#8316)
This commit converts content and layout to use Hugo.
2018-05-05 09:00:51 -07:00