Commit Graph

51 Commits

Author SHA1 Message Date
derekwaynecarr
3672d8d728 Update namespaces design 2015-03-18 11:33:02 -04:00
Derek Carr
91131a654e Merge pull request #5186 from markturansky/pv_proposal
Persistent Storage proposal edits
2015-03-12 09:58:02 -04:00
Salvatore Dario Minonne
3e6472f5c4 updating labels.md and design/labels.md 2015-03-11 23:29:59 +01:00
markturansky
3157ffb283 Added verbiage about events 2015-03-10 10:18:24 -04:00
markturansky
bfe719d90d Edited to reflect that PVs have no namespace 2015-03-09 12:21:54 -04:00
Young
8bb4a4b439 simple typo 2015-03-08 15:38:21 +00:00
markturansky
ddb092481d Added more detail and explained workflow/lifecycle of a persistent volume using examples 2015-03-05 11:55:16 -05:00
markturansky
17dc95dd6f Persistent storage proposal 2015-03-03 15:06:18 -05:00
Paul Morie
85e890840e Fix nits in security proposal 2015-02-25 14:39:01 -05:00
Vish Kannan
561ad98901 Merge pull request #4741 from benmccann/docs-update
Docs: update links
2015-02-24 12:56:34 -08:00
Ben McCann
b73662ac95 Update links to security contexts and service accounts to point to actual docs instead of pull requests now that those proposals have been merged 2015-02-23 13:55:02 -08:00
Tim Hockin
3e7248f0f4 comments on base64-ness of secrets 2015-02-23 12:40:06 -08:00
Tim Hockin
8bdfc352ce minor fixups as I review secrets 2015-02-23 12:39:47 -08:00
Eric Tune
38a85ef81e Service account proposal.
COMMIT_BLOCKED_ON_GENDOCS
2015-02-20 12:04:39 -08:00
Victor Marmol
49e7900e1a Merge pull request #4665 from ddysher/admission-doc
Admission doc cleanup
2015-02-20 09:35:38 -08:00
Deyuan Deng
a43a039e5f Admission doc cleanup 2015-02-20 10:46:09 -05:00
Andy Goldstein
5bd0e9ab05 Add streaming command execution & port forwarding
Add streaming command execution & port forwarding via HTTP connection
upgrades (currently using SPDY).
2015-02-20 09:57:02 -05:00
Paul Morie
777b464de5 Minor addendums to secrets proposal 2015-02-19 12:02:18 -05:00
Eric Tune
e045b19bec Merge pull request #4126 from pmorie/secrets_proposal
Secrets proposal
2015-02-18 09:05:18 -08:00
Paul Morie
ea18e6698d Secrets proposal 2015-02-17 20:29:38 -05:00
Saad Ali
9d850be8d7 Update Event Compression Design Doc with LRU Cache 2015-02-17 16:36:08 -08:00
Eric Tune
97b7f7c391 Merge pull request #3910 from csrwng/security_contexts
[Proposal] Security Contexts
2015-02-17 08:42:06 -08:00
Eric Tune
64678b71f3 Merge pull request #4372 from saad-ali/event_compression_doc
Documentation for Event Compression
2015-02-14 00:11:32 -08:00
Eric Tune
e84b5b9e78 Merge pull request #4029 from smarterclayton/security_proposal
Kubernetes pod and namespace security model
2015-02-13 09:08:37 -08:00
Clayton Coleman
358d1ab304 Kubernetes pod and namespace security model
This proposed update to docs/design/security.md includes proposals
on how to ensure containers have consistent Linux security behavior
across nodes, how containers authenticate and authorize to the master
and other components, and how secret data could be distributed to
pods to allow that authentication.

References concepts from #3910, #2030, and #2297 as well as upstream issues
around the Docker vault and Docker secrets.
2015-02-12 10:37:27 -05:00
Saad Ali
b2d432005f Documentation for Event Compression 2015-02-11 18:04:30 -08:00
csrwng
2b01746104 Specify intent for container isolation and add details for id mapping 2015-02-09 14:21:40 -05:00
Alex Robinson
ad8aaaad0e Fix the broken links in the labels and access design docs. 2015-02-03 23:02:21 +00:00
csrwng
8b72dd9000 [Proposal] Security Contexts 2015-01-28 19:02:00 -05:00
Mrunal Patel
19e0605f5b Replace "net" by "pod infra" in docs and format strings. 2015-01-28 15:03:06 -08:00
Joe Beda
fab7636aa6 Add Dockerfile for sequence diagram generation 2015-01-26 15:25:47 -08:00
roberthbailey
b6e345c3c9 Merge pull request #3802 from jbeda/seqdiag-tweak
Small tweaks to sequence diagram generation.
2015-01-26 13:54:08 -08:00
Joe Beda
a56595ce0e Small tweaks to sequence diagram generation.
Fix up name of font download and no transparency so it is easier to iterate.
2015-01-26 10:35:20 -08:00
derekwaynecarr
badf5560a4 Doc tweaks 2015-01-23 12:56:49 -05:00
derekwaynecarr
6c17bfa526 Remove resource_controller proposal 2015-01-23 12:56:49 -05:00
derekwaynecarr
c772de762f ResourceQuota proposal 2015-01-23 12:56:49 -05:00
derekwaynecarr
2803782af6 Design document for LimitRange 2015-01-23 12:56:49 -05:00
derekwaynecarr
ec568d7d9a Resource controller proposal 2015-01-23 12:56:49 -05:00
Clayton Coleman
3ba8af04ac Clarify name must be lowercase in docs, to match code
We restrict DNS_SUBDOMAIN to lowercase for sanity.
2015-01-20 13:55:17 -05:00
Eric Tune
d24c754474 Merge pull request #3281 from jbeda/cluster-join
Design doc for clustering.
2015-01-09 11:46:22 -08:00
Joe Beda
3047d2a4bc Tweaks based on comments 2015-01-09 09:11:26 -08:00
derekwaynecarr
cfd58000e9 Update design doc with final PR merge 2015-01-08 11:15:40 -05:00
Joe Beda
7a806b2e57 Design doc for clustering.
This is related to #2303 and steals from #2435.
2015-01-07 12:35:38 -08:00
Clayton Coleman
99977ceb91 Proposal: Isolate kubelet from etcd
Discusses the current security risks posed by the kubelet->etcd pattern
and discusses some options.

Triggered by #846 and referenced in #859
2015-01-04 00:21:47 -05:00
derekwaynecarr
0cabf0bcfe Version 2.0 of proposal 2014-12-18 13:56:34 -05:00
derekwaynecarr
0ede6db96f Admission control proposal 2014-12-15 14:32:46 -05:00
Sam Ghods
6399854240 Remove unused YAML tags and GetYAML/SetYAML methods
Unneeded after move to ghodss/yaml.
2014-12-02 16:25:28 -08:00
Tim Hockin
89875ef09d Loosen DNS 952 for labels 2014-12-01 12:30:43 -08:00
Joe Beda
6ba07b38fc Convert gcutil to gcloud compute 2014-11-25 15:17:00 -08:00
Meir Fischer
1b837c2397 Fix bad selector file link 2014-11-09 22:46:07 -05:00