Paul Morie
777b464de5
Minor addendums to secrets proposal
2015-02-19 12:02:18 -05:00
Eric Tune
e045b19bec
Merge pull request #4126 from pmorie/secrets_proposal
...
Secrets proposal
2015-02-18 09:05:18 -08:00
Paul Morie
ea18e6698d
Secrets proposal
2015-02-17 20:29:38 -05:00
Saad Ali
9d850be8d7
Update Event Compression Design Doc with LRU Cache
2015-02-17 16:36:08 -08:00
Eric Tune
97b7f7c391
Merge pull request #3910 from csrwng/security_contexts
...
[Proposal] Security Contexts
2015-02-17 08:42:06 -08:00
Eric Tune
64678b71f3
Merge pull request #4372 from saad-ali/event_compression_doc
...
Documentation for Event Compression
2015-02-14 00:11:32 -08:00
Eric Tune
e84b5b9e78
Merge pull request #4029 from smarterclayton/security_proposal
...
Kubernetes pod and namespace security model
2015-02-13 09:08:37 -08:00
Clayton Coleman
358d1ab304
Kubernetes pod and namespace security model
...
This proposed update to docs/design/security.md includes proposals
on how to ensure containers have consistent Linux security behavior
across nodes, how containers authenticate and authorize to the master
and other components, and how secret data could be distributed to
pods to allow that authentication.
References concepts from #3910 , #2030 , and #2297 as well as upstream issues
around the Docker vault and Docker secrets.
2015-02-12 10:37:27 -05:00
Saad Ali
b2d432005f
Documentation for Event Compression
2015-02-11 18:04:30 -08:00
csrwng
2b01746104
Specify intent for container isolation and add details for id mapping
2015-02-09 14:21:40 -05:00
Alex Robinson
ad8aaaad0e
Fix the broken links in the labels and access design docs.
2015-02-03 23:02:21 +00:00
csrwng
8b72dd9000
[Proposal] Security Contexts
2015-01-28 19:02:00 -05:00
Mrunal Patel
19e0605f5b
Replace "net" by "pod infra" in docs and format strings.
2015-01-28 15:03:06 -08:00
Joe Beda
fab7636aa6
Add Dockerfile for sequence diagram generation
2015-01-26 15:25:47 -08:00
roberthbailey
b6e345c3c9
Merge pull request #3802 from jbeda/seqdiag-tweak
...
Small tweaks to sequence diagram generation.
2015-01-26 13:54:08 -08:00
Joe Beda
a56595ce0e
Small tweaks to sequence diagram generation.
...
Fix up name of font download and no transparency so it is easier to iterate.
2015-01-26 10:35:20 -08:00
derekwaynecarr
badf5560a4
Doc tweaks
2015-01-23 12:56:49 -05:00
derekwaynecarr
6c17bfa526
Remove resource_controller proposal
2015-01-23 12:56:49 -05:00
derekwaynecarr
c772de762f
ResourceQuota proposal
2015-01-23 12:56:49 -05:00
derekwaynecarr
2803782af6
Design document for LimitRange
2015-01-23 12:56:49 -05:00
derekwaynecarr
ec568d7d9a
Resource controller proposal
2015-01-23 12:56:49 -05:00
Clayton Coleman
3ba8af04ac
Clarify name must be lowercase in docs, to match code
...
We restrict DNS_SUBDOMAIN to lowercase for sanity.
2015-01-20 13:55:17 -05:00
Eric Tune
d24c754474
Merge pull request #3281 from jbeda/cluster-join
...
Design doc for clustering.
2015-01-09 11:46:22 -08:00
Joe Beda
3047d2a4bc
Tweaks based on comments
2015-01-09 09:11:26 -08:00
derekwaynecarr
cfd58000e9
Update design doc with final PR merge
2015-01-08 11:15:40 -05:00
Joe Beda
7a806b2e57
Design doc for clustering.
...
This is related to #2303 and steals from #2435 .
2015-01-07 12:35:38 -08:00
Clayton Coleman
99977ceb91
Proposal: Isolate kubelet from etcd
...
Discusses the current security risks posed by the kubelet->etcd pattern
and discusses some options.
Triggered by #846 and referenced in #859
2015-01-04 00:21:47 -05:00
derekwaynecarr
0cabf0bcfe
Version 2.0 of proposal
2014-12-18 13:56:34 -05:00
derekwaynecarr
0ede6db96f
Admission control proposal
2014-12-15 14:32:46 -05:00
Sam Ghods
6399854240
Remove unused YAML tags and GetYAML/SetYAML methods
...
Unneeded after move to ghodss/yaml.
2014-12-02 16:25:28 -08:00
Tim Hockin
89875ef09d
Loosen DNS 952 for labels
2014-12-01 12:30:43 -08:00
Joe Beda
6ba07b38fc
Convert gcutil to gcloud compute
2014-11-25 15:17:00 -08:00
Meir Fischer
1b837c2397
Fix bad selector file link
2014-11-09 22:46:07 -05:00
Eric Tune
c47693c0d5
Separated user, dev, and design docs.
...
Renamed: logging.md -> devel/logging.m
Renamed: access.md -> design/access.md
Renamed: identifiers.md -> design/identifiers.md
Renamed: labels.md -> design/labels.md
Renamed: namespaces.md -> design/namespaces.md
Renamed: security.md -> design/security.md
Renamed: networking.md -> design/networking.md
Added abbreviated user user-focused document in place of most moved docs.
Added docs/README.md explains how docs are organized.
Added short, user-oriented documentation on labels
Added a glossary.
Fixed up some links.
2014-10-31 08:35:53 -07:00