Maciej Szulik
6a2ee9ae9f
Fixed markdown
2015-03-24 12:01:41 +01:00
Brian Grant
3e91fc5288
Merge pull request #5195 from derekwaynecarr/update_namespace_design
...
Design graceful termination of Namespaces
2015-03-20 09:00:35 -07:00
derekwaynecarr
3672d8d728
Update namespaces design
2015-03-18 11:33:02 -04:00
Wojciech Tyczynski
e6d188fca8
Remove BoundPod structure
2015-03-17 10:27:41 +01:00
Derek Carr
91131a654e
Merge pull request #5186 from markturansky/pv_proposal
...
Persistent Storage proposal edits
2015-03-12 09:58:02 -04:00
Salvatore Dario Minonne
3e6472f5c4
updating labels.md and design/labels.md
2015-03-11 23:29:59 +01:00
markturansky
3157ffb283
Added verbiage about events
2015-03-10 10:18:24 -04:00
markturansky
bfe719d90d
Edited to reflect that PVs have no namespace
2015-03-09 12:21:54 -04:00
Young
8bb4a4b439
simple typo
2015-03-08 15:38:21 +00:00
markturansky
ddb092481d
Added more detail and explained workflow/lifecycle of a persistent volume using examples
2015-03-05 11:55:16 -05:00
markturansky
17dc95dd6f
Persistent storage proposal
2015-03-03 15:06:18 -05:00
Paul Morie
85e890840e
Fix nits in security proposal
2015-02-25 14:39:01 -05:00
Vish Kannan
561ad98901
Merge pull request #4741 from benmccann/docs-update
...
Docs: update links
2015-02-24 12:56:34 -08:00
Ben McCann
b73662ac95
Update links to security contexts and service accounts to point to actual docs instead of pull requests now that those proposals have been merged
2015-02-23 13:55:02 -08:00
Tim Hockin
3e7248f0f4
comments on base64-ness of secrets
2015-02-23 12:40:06 -08:00
Tim Hockin
8bdfc352ce
minor fixups as I review secrets
2015-02-23 12:39:47 -08:00
Eric Tune
38a85ef81e
Service account proposal.
...
COMMIT_BLOCKED_ON_GENDOCS
2015-02-20 12:04:39 -08:00
Victor Marmol
49e7900e1a
Merge pull request #4665 from ddysher/admission-doc
...
Admission doc cleanup
2015-02-20 09:35:38 -08:00
Deyuan Deng
a43a039e5f
Admission doc cleanup
2015-02-20 10:46:09 -05:00
Andy Goldstein
5bd0e9ab05
Add streaming command execution & port forwarding
...
Add streaming command execution & port forwarding via HTTP connection
upgrades (currently using SPDY).
2015-02-20 09:57:02 -05:00
Paul Morie
777b464de5
Minor addendums to secrets proposal
2015-02-19 12:02:18 -05:00
Eric Tune
e045b19bec
Merge pull request #4126 from pmorie/secrets_proposal
...
Secrets proposal
2015-02-18 09:05:18 -08:00
Paul Morie
ea18e6698d
Secrets proposal
2015-02-17 20:29:38 -05:00
Saad Ali
9d850be8d7
Update Event Compression Design Doc with LRU Cache
2015-02-17 16:36:08 -08:00
Eric Tune
97b7f7c391
Merge pull request #3910 from csrwng/security_contexts
...
[Proposal] Security Contexts
2015-02-17 08:42:06 -08:00
Eric Tune
64678b71f3
Merge pull request #4372 from saad-ali/event_compression_doc
...
Documentation for Event Compression
2015-02-14 00:11:32 -08:00
Eric Tune
e84b5b9e78
Merge pull request #4029 from smarterclayton/security_proposal
...
Kubernetes pod and namespace security model
2015-02-13 09:08:37 -08:00
Clayton Coleman
358d1ab304
Kubernetes pod and namespace security model
...
This proposed update to docs/design/security.md includes proposals
on how to ensure containers have consistent Linux security behavior
across nodes, how containers authenticate and authorize to the master
and other components, and how secret data could be distributed to
pods to allow that authentication.
References concepts from #3910 , #2030 , and #2297 as well as upstream issues
around the Docker vault and Docker secrets.
2015-02-12 10:37:27 -05:00
Saad Ali
b2d432005f
Documentation for Event Compression
2015-02-11 18:04:30 -08:00
csrwng
2b01746104
Specify intent for container isolation and add details for id mapping
2015-02-09 14:21:40 -05:00
Alex Robinson
ad8aaaad0e
Fix the broken links in the labels and access design docs.
2015-02-03 23:02:21 +00:00
csrwng
8b72dd9000
[Proposal] Security Contexts
2015-01-28 19:02:00 -05:00
Mrunal Patel
19e0605f5b
Replace "net" by "pod infra" in docs and format strings.
2015-01-28 15:03:06 -08:00
Joe Beda
fab7636aa6
Add Dockerfile for sequence diagram generation
2015-01-26 15:25:47 -08:00
roberthbailey
b6e345c3c9
Merge pull request #3802 from jbeda/seqdiag-tweak
...
Small tweaks to sequence diagram generation.
2015-01-26 13:54:08 -08:00
Joe Beda
a56595ce0e
Small tweaks to sequence diagram generation.
...
Fix up name of font download and no transparency so it is easier to iterate.
2015-01-26 10:35:20 -08:00
derekwaynecarr
badf5560a4
Doc tweaks
2015-01-23 12:56:49 -05:00
derekwaynecarr
6c17bfa526
Remove resource_controller proposal
2015-01-23 12:56:49 -05:00
derekwaynecarr
c772de762f
ResourceQuota proposal
2015-01-23 12:56:49 -05:00
derekwaynecarr
2803782af6
Design document for LimitRange
2015-01-23 12:56:49 -05:00
derekwaynecarr
ec568d7d9a
Resource controller proposal
2015-01-23 12:56:49 -05:00
Clayton Coleman
3ba8af04ac
Clarify name must be lowercase in docs, to match code
...
We restrict DNS_SUBDOMAIN to lowercase for sanity.
2015-01-20 13:55:17 -05:00
Eric Tune
d24c754474
Merge pull request #3281 from jbeda/cluster-join
...
Design doc for clustering.
2015-01-09 11:46:22 -08:00
Joe Beda
3047d2a4bc
Tweaks based on comments
2015-01-09 09:11:26 -08:00
derekwaynecarr
cfd58000e9
Update design doc with final PR merge
2015-01-08 11:15:40 -05:00
Joe Beda
7a806b2e57
Design doc for clustering.
...
This is related to #2303 and steals from #2435 .
2015-01-07 12:35:38 -08:00
Clayton Coleman
99977ceb91
Proposal: Isolate kubelet from etcd
...
Discusses the current security risks posed by the kubelet->etcd pattern
and discusses some options.
Triggered by #846 and referenced in #859
2015-01-04 00:21:47 -05:00
derekwaynecarr
0cabf0bcfe
Version 2.0 of proposal
2014-12-18 13:56:34 -05:00
derekwaynecarr
0ede6db96f
Admission control proposal
2014-12-15 14:32:46 -05:00
Sam Ghods
6399854240
Remove unused YAML tags and GetYAML/SetYAML methods
...
Unneeded after move to ghodss/yaml.
2014-12-02 16:25:28 -08:00
