Nicolas Goudry c6fcbf6ee0 Remove access to cluster from anonymous users (#11016) ...

* feat: add user facing variable with default

* feat: remove rolebinding to anonymous users after init and upgrade

* feat: use file discovery for secondary control plane nodes

* feat: use file discovery for nodes

* fix: do not fail if rolebinding does not exist

* docs: add warning about kube_api_anonymous_auth

* style: improve readability of delegate_to parameter

* refactor: rename discovery kubeconfig file

* test: enable new variable in hardening and upgrade test cases

* docs: add option to config parameters

* test: multiple instances and upgrade

2024-04-02 23:54:12 -07:00

..

calico_peer_example

add support for Calico BGPPeer sourceAddress (#8306)

2021-12-20 01:51:25 -08:00

figures

rename almost all mentions of kargo

2017-06-16 13:25:46 -04:00

img

feat: add kubelet systemd service hardening option (#9194)

2022-08-30 11:18:55 -07:00

ingress_controller

updated ingress controller version (#10868)

2024-02-12 01:11:03 -08:00

kubernetes-apps

Add scheduler plugins support (#10747)

2024-01-23 07:42:33 +01:00

upgrades

fix typo in doc. (#9728)

2023-01-30 16:58:49 -08:00

_sidebar.md

Drop installation notes for Debian Jessie (#10642)

2023-11-28 22:35:28 +01:00

amazonlinux.md

Fix wording in amazonlinux.md

2023-01-03 10:27:59 +01:00

ansible_collection.md

Refactor check_galaxy + fix version (#10729)

2024-01-11 15:49:31 +01:00

ansible.md

Fix ansible python version range (#11009)

2024-03-14 05:54:31 -07:00

arch.md

Adjust the table style to make it easier to read (#9731)

2023-01-31 00:56:48 -08:00

aws-ebs-csi.md

the KUESPRAYDIR defined but never used (#8930)

2022-06-06 07:42:23 -07:00

aws.md

Add node_taints to aws_inventory script (#10168) (#10170)

2023-06-01 22:12:52 -07:00

azure-csi.md

Optimize the document for readability (#9730)

2023-02-01 00:01:06 -08:00

azure.md

Optimize the document for readability (#9730)

2023-02-01 00:01:06 -08:00

bootstrap-os.md

add pre-commit hook to facilitate local testing (#9158)

2022-08-24 06:54:03 -07:00

calico.md

add nat_outgoing_ipv6 to calico defaults and docs (#10866)

2024-02-05 23:14:22 -08:00

centos.md

update-docs-for-calico-in-centos (#10417)

2023-09-08 05:18:14 -07:00

cert_manager.md

fix docs for cert_manager.md (#9724)

2023-01-28 19:14:40 -08:00

cgroups.md

optimize cgroups settings for node reserved (#9209)

2022-12-30 08:05:30 -08:00

ci-setup.md

Fix containerd config_path mirrors and remove nerdctl insecure_registry (#10196)

2023-08-16 05:18:27 -07:00

ci.md

Add helm support for custom_cni deployment (#10529)

2023-11-16 00:32:21 +01:00

cilium.md

Doc: variable cilium_ipsec_key must be base64 encoded (#10781)

2024-01-22 17:49:00 +01:00

cinder-csi.md

Fixed the incorrect links in kubespray/docs (#10159)

2023-05-30 19:35:47 -07:00

cloud.md

Optimize the document for readability (#9730)

2023-02-01 00:01:06 -08:00

cni.md

Fix cni documentation (#9778)

2023-02-12 16:05:31 -08:00

comparisons.md

doc: Update 'Kubespray vs Kubeadm' (#7834)

2021-07-28 03:15:34 -07:00

containerd.md

remove containerd registries (#10738)

2023-12-21 10:01:12 +01:00

cri-o.md

Update docs for crio (#10785)

2024-01-16 05:23:09 +01:00

dns-stack.md

Allow the DNS stack to be backward compatible with an old dns_domain (#10630)

2024-01-24 06:31:22 +01:00

docker.md

Ability to define GPG key path for Docker APT (#10513)

2023-10-13 04:06:04 +02:00

downloads.md

Remove warning about Docker-only support (#7626)

2021-05-20 00:01:05 -07:00

encrypting-secret-data-at-rest.md

Adjust the table style to make it easier to read (#9731)

2023-01-31 00:56:48 -08:00

equinix-metal.md

Optimize the document for readability (#9730)

2023-02-01 00:01:06 -08:00

etcd.md

[EOS-11830] Use ETCD port 2381 for metrics (#10332)

2023-08-08 11:06:16 -07:00

fcos.md

Some update for the deploy on fedora coreos: (#10030)

2023-05-18 15:46:33 -07:00

flannel.md

Feature/add flannel wireguard encryption backend as option (#9583)

2022-12-18 15:39:43 -08:00

flatcar.md

Document host_resolvconf as default value for resolvconf_mode (#8493)

2022-01-31 03:12:24 -08:00

gcp-lb.md

add pre-commit hook to facilitate local testing (#9158)

2022-08-24 06:54:03 -07:00

gcp-pd-csi.md

Rename ansible groups to use _ instead of - (#7552)

2021-04-29 05:20:50 -07:00

getting-started.md

docs: remove basic auth reference in getting-started (#7823)

2021-11-19 14:49:23 -08:00

gvisor.md

gVisor: initial support for gVisor container runtime (#7661)

2021-06-21 05:18:51 -07:00

ha-mode.md

Permit custom names for API server lb/proxy containers. (#10166)

2023-06-08 02:54:13 -07:00

hardening.md

[kubernetes] Support kubernetes 1.29 (#10820)

2024-01-31 00:57:23 -08:00

integration.md

Optimize the document for readability (#9730)

2023-02-01 00:01:06 -08:00

kata-containers.md

doc: write how to use kata-container for pods (#8817)

2022-05-13 23:15:18 -07:00

kube-ovn.md

Optimize the document for readability (#9730)

2023-02-01 00:01:06 -08:00

kube-router.md

* corrected a link (#9988)

2023-04-16 18:28:43 -07:00

kube-vip.md

make kube-vip LeaderElection variables configurable (#11021)

2024-03-25 02:24:57 -07:00

kubernetes-reliability.md

Fixed the incorrect links in kubespray/docs (#10159)

2023-05-30 19:35:47 -07:00

kylinlinux.md

Add docker support for Kylin V10 (#9144)

2022-08-03 15:03:46 -07:00

large-deployments.md

Make large-deployments.md link to downloads.md (#10840)

2024-01-25 14:55:33 +01:00

macvlan.md

Rename ansible groups to use _ instead of - (#7552)

2021-04-29 05:20:50 -07:00

metallb.md

Migrate node-role.kubernetes.io/master to node-role.kubernetes.io/con… (#10464)

2023-10-17 21:39:40 +02:00

mirror.md

mirror-for-china

2022-10-18 09:17:42 +02:00

mitogen.md

[mitogent] update to 0.3.2 (#8470)

2022-01-27 08:36:59 -08:00

multus.md

fix moved url in multus.md (#9722)

2023-01-28 19:10:33 -08:00

netcheck.md

netchecker: update images to 1.2.2 from Mirantis (#8074)

2021-10-19 10:17:04 -07:00

nodes.md

docs: add command to restart nginx-proxy container when adding node (#10406)

2023-09-01 09:24:32 -07:00

ntp.md

Fix typos in docs (#9276)

2022-09-15 00:09:22 -07:00

offline-environment.md

Fix the path of download.yml (#10711)

2023-12-12 13:47:27 +01:00

openeuler.md

Add docker support for openEuler linux (#9498)

2022-11-17 18:18:30 -08:00

openstack.md

fix: Kubelet not starting because of non-existent feature gate (#10448)

2024-02-16 01:27:46 -08:00

opensuse.md

Fix CI for Fedora (followup) + OpenSUSE Leap (update to 15.3) (#8407)

2022-01-24 23:24:30 -08:00

port-requirements.md

wqAdd-Port-Requirements (#9969)

2023-04-12 00:04:36 -07:00

proxy.md

feat: add option to use custome CA for https_proxy (#10215)

2023-06-23 09:59:24 -07:00

recover-control-plane.md

Offline control plane recover (#10660)

2024-01-22 17:22:27 +01:00

rhel.md

update-docs-for-calico-in-centos (#10417)

2023-09-08 05:18:14 -07:00

roadmap.md

Various documentation updates (#8243)

2021-11-29 15:05:21 -08:00

setting-up-your-first-cluster.md

Optimize the document for readability (#9730)

2023-02-01 00:01:06 -08:00

test_cases.md

Fix etcd client generation (#10769)

2024-01-16 15:50:41 +01:00

uoslinux.md

Add UOS linux support (#9432)

2022-10-30 17:16:43 -07:00

upgrades.md

Doc clarification: skipping patches releases is OK (#10850)

2024-01-29 22:31:40 -08:00

vagrant.md

Add extra_vars support to vagrant setup (#10932)

2024-02-19 02:58:20 -08:00

vars.md

Remove access to cluster from anonymous users (#11016)

2024-04-02 23:54:12 -07:00

vsphere-csi.md

docs: small vsphere docs fixes (#9796)

2023-02-24 00:43:34 -08:00

vsphere.md

docs: small vsphere docs fixes (#9796)

2023-02-24 00:43:34 -08:00

weave.md

Rename ansible groups to use _ instead of - (#7552)

2021-04-29 05:20:50 -07:00