Commit Graph

222 Commits

Author SHA1 Message Date
Carlos Salas
81637f366a docs: edit custom launch template updates for eks (#1118)
Signed-off-by: Carlos Salas <carlos.salas@suse.com>
2024-02-12 12:06:39 -05:00
Andy Pitcher
77a86a5acc Add Rancher Security Release (Feb-2024) CVEs to latest/2.8/2.7/2.6
- CVE-2023-32193
	- CVE-2023-32192
        - CVE-2023-22649
        - CVE-2023-32194
2024-02-09 12:45:37 -05:00
Sunil Singh
4a9e9d0d0c Merge pull request #1102 from sunilarjun/2.8.2-webhook-version
Adding entries for the 2.8.2 webhook mapping
2024-02-08 10:02:56 -08:00
Sunil Singh
9012432eb8 Merge pull request #1106 from sunilarjun/rancher-backup-operator-note
Update Body Text/Heading - Rancher backup-restore-operator Default Storage Location
2024-02-07 16:50:43 -08:00
Silvio Moioli
ed88739bef tuning: recommend against third party apps (#1086)
* tuning: recommend against third party apps

Signed-off-by: Silvio Moioli <silvio@moioli.net>

* Wording suggestions from code review

Co-authored-by: Marty Hernandez Avedon <marty.avedon@suse.com>
Signed-off-by: Silvio Moioli <silvio@moioli.net>

* Apply suggestions from code review

tense: was > are

---------

Signed-off-by: Silvio Moioli <silvio@moioli.net>
Co-authored-by: Marty Hernandez Avedon <marty.avedon@suse.com>
2024-02-06 11:22:32 -05:00
Sunil Singh
9a4f272235 Updating the default storage location body text to better describe options for configuring the location, and revising the heading/term for the Rancher backup-restore-operator helm chart in both the how-to and reference pages to add a bit of clarification.
Signed-off-by: Sunil Singh <sunil.singh@suse.com>
2024-02-05 15:41:30 -08:00
Sunil Singh
d0f2f658c9 Adding entries for the 2.8.2 webhook mapping.
Signed-off-by: Sunil Singh <sunil.singh@suse.com>
2024-02-02 13:07:07 -08:00
Billy Tat
dae1b76dc6 Update canonical links 2024-01-29 10:07:22 -08:00
Billy Tat
8699d8fac7 Merge pull request #1070 from btat/2.8.1-webhook-version
Add 2.8.1 webhook version mapping
2024-01-22 12:47:43 -08:00
Billy Tat
6d59b46f70 Merge remote-tracking branch 'upstream/main' into move-pages-for-subheaders-latest 2024-01-19 13:42:58 -08:00
Billy Tat
cab14bc279 Add 2.8.1 webhook version mapping 2024-01-17 14:35:08 -08:00
Marty Hernandez Avedon
2302e37376 #753 other title improvements (#1050)
* vagrant quickstart retitled for consistency

* rm number from title

* 2. rm number from title

* 3. rm number from title (Istio related, as were 2 prev)

* 4. rm number from title (Istio related)

* 5. rm number from title (Istio related)

* 6. rm number from title (Istio related)

* making backup 'examples' title more specific

* rewrite + making monitoring 'examples' title more specific

* suggestions from Btat

correcting capitalization for github, combining two lines into one

* versioning previous commit

* applying sunil's suggestions

rm'ing numbers from titles of pages missed in 2.0-2.4

* Apply suggestions from code review

Co-authored-by: Billy Tat <btat@suse.com>

---------

Co-authored-by: Billy Tat <btat@suse.com>
2024-01-17 13:30:50 -05:00
Jiaqi Luo
ce6eb37130 address comments 2024-01-12 15:30:18 -07:00
Jiaqi Luo
e1aa035e69 add docs for additionalManifest field for RKE2/K3s cluster 2024-01-12 14:03:48 -07:00
Marty Hernandez Avedon
3a4b7e73c0 #766 Consistently using verbs in titles (#1038)
* gerundify Configuration for Storage Classes in Azure

* gerundify Authentication Config

* gerundify Bootstrap Password

* gerundify and disambiguate manage-PSP

* gerundify and disambiguate create-PSP

* syncing? Syncing what?

* updating label for Configure OpenLDAP

* updating label for authentication config

* updating label for configuring microsoft ad and shibboleth (saml)

* updating label for configuring microsoft ad and shibboleth (saml) in sidebars (last commit covered versioned docs)

* label + title for one of several sets of pages entitled role-based access control

* gerundify Upgrade a Hardened Custom/Imported Cluster to Kubernetes v1.25

* re-order title of Certificate Troubleshooting so verb comes first

* added 'about' to title because the page is about drivers that provision, not how to provision a driver

* template enforcement > enforcing templates

* update label to match title - deploy > deploying

* updated label to matach title - manage clusters > cluster administration

* gerundify set up in infrastructure setup section

* typo fix - spacing

* matching label to title - launch > launching

* label matching title - set up part 2

* label matching title - windows clusters

* how to configure > configuring

* using > launching (partially matches label to title)

* ingress config > configging an ingress

* match label to title - project administration

* match label to title - project resource quotas

* match title to label - monitoring/alerting guides

* matching label to title - enabling

* gerundify allow unsupported storage drivers

* Update openapi/swagger.json

* lost metadata syntax re-applied

* Apply suggestions from code review
2024-01-11 12:49:32 -05:00
Billy Tat
7bdc1c8d2a Merge pull request #1053 from danielhass/patch-1
Added non-changeable options to rke2-cluster-configuration
2024-01-09 14:16:20 -08:00
Billy Tat
51ed6e977b Convert 'broken' links to standard Markdown links 2024-01-08 16:30:27 -08:00
Daniel Haß
74ea0817dc Apply suggestions from code review
Co-authored-by: Billy Tat <btat@suse.com>
2024-01-08 15:51:25 +01:00
Daniel Haß
d0a260b3d0 added non-changeable options to rke2-cluster-configuration 2024-01-05 07:59:55 +01:00
Andy Pitcher
ef01bf25ee Add rancher-selinux's rpm install guide for EL9 2023-12-29 11:50:33 +01:00
Billy Tat
f7066594fe [latest] Fix links to 'shared-files' module import 2023-12-22 13:34:39 -08:00
Billy Tat
dd46955d9c [latest] Move files out of pages-for-subheaders 2023-12-22 13:33:02 -08:00
Marty Hernandez Avedon
2267d1c735 #1031 - Note about cloud credentials and admins (#1039)
* note about cloud credentials and admin view/write

* rewrite for more natural phrasing

* rm 'permanently' as it implies they can't be updated

* Update docs/reference-guides/user-settings/manage-cloud-credentials.md

* versioning
2023-12-20 17:36:10 -05:00
Marty Hernandez Avedon
e479cc33e3 rm 'add additional' phrase from docs (#1020)
* rm 'add additional' phrase from docs

* these > more
2023-12-06 18:35:48 -05:00
Marty Hernandez Avedon
437ab199da correcting capitalization: helm > Helm (#1018) 2023-12-06 16:17:31 -05:00
Billy Tat
3b8defdbb1 Update webhook version table (#1006)
* Update webhook version table

* Bump 2.8 webhook version

* Sync 2.8 table with latest table

* Bump webhook version
2023-12-06 14:51:10 -05:00
Billy Tat
03ea6163fb Port version-2.8 updates to latest (/docs) (#1013)
* Port version-2.8 updates to latest (/docs)

Includes changes from 1b6d9506 (2023-10-06) to 1f39a6ff (2023-11-30)

* Fix redirects
2023-12-06 14:48:27 -05:00
Marty Hernandez Avedon
662afc641b #420 Completes canonical links task (#1011)
* Completes canonical links task

* spacing
2023-11-30 10:10:34 -05:00
Marty Hernandez Avedon
ccd59cb482 #879 Add Project Owner to 'Project Member Can't Create Namespace' doc (#894)
* 879 Add Project Owner to 'Project Member Can't Create Namespace' doc

* versioned doc

* Update docs/reference-guides/rancher-webhook.md

Co-authored-by: Billy Tat <btat@suse.com>

* Update docs/reference-guides/rancher-webhook.md

Co-authored-by: Michael Bolot <michael.bolot@suse.com>

* Apply suggestions from code review

Co-authored-by: Lucas Saintarbor <lucas.saintarbor@suse.com>

* Update docs/reference-guides/rancher-webhook.md

* page sync

* added v2.8 page

* merge syntax left in file, rm'd backticks from version numbers

---------

Co-authored-by: Billy Tat <btat@suse.com>
Co-authored-by: Michael Bolot <michael.bolot@suse.com>
Co-authored-by: Lucas Saintarbor <lucas.saintarbor@suse.com>
2023-11-16 14:51:28 -05:00
pdellamore
25771e2843 Add session management section (#981)
* Add note regarding rancher pentest reports public availability

This PR will add a note regarding third-party penetration test reports
public disclosure.

* Add session management section to rancher security best practices

This PR will create a new section inside Rancher Security Best Practices
adding security recommendations for RM deployments that might need additional
security controls.

* Apply suggestions from code review

Co-authored-by: Paulo Gomes <paulo.gomes.uk@gmail.com>

* Update docs/reference-guides/rancher-security/rancher-security-best-practices.md

* Update docs/reference-guides/rancher-security/rancher-security-best-practices.md

Co-authored-by: Guilherme Macedo <guilherme@gmacedo.com>

* versioned docs

---------

Co-authored-by: Pietro Dell'Amore <pdellamore@MacBook-Pro-de-Pietro.local>
Co-authored-by: Marty Hernandez Avedon <marty.avedon@suse.com>
Co-authored-by: Paulo Gomes <paulo.gomes.uk@gmail.com>
Co-authored-by: Guilherme Macedo <guilherme@gmacedo.com>
2023-11-16 11:35:02 -05:00
martyav
717152a781 canonical links for single-user-nodes and user-settings 2023-11-03 14:49:51 -04:00
Billy Tat
6a2a83efe3 Merge pull request #902 from pdellamore/add-rancher-security-best-practices
Add Rancher Security Best Practices section
2023-10-24 13:41:41 -07:00
Billy Tat
410ae2701a Remove 2.8 specific content and fix typo 2023-10-24 13:06:13 -07:00
Billy Tat
d27700c1b2 Fix links in /docs 2023-10-20 17:00:59 -07:00
Billy Tat
8d3ef96cb3 Missed fixes in latest 2023-10-20 15:19:39 -07:00
Billy Tat
e9f5f7ff15 Fix links lin /versioned_docs/version-2.5 2023-10-20 15:19:38 -07:00
Billy Tat
9e49c4c94c Fix links lin /docs 2023-10-20 15:19:38 -07:00
Marty Hernandez Avedon
2651168190 Merge branch 'main' into add-rancher-security-best-practices 2023-10-19 17:00:23 -04:00
Jiaqi Luo
0940a22d46 Update the namespace exception list at multiple places (#926) 2023-10-18 12:30:02 -07:00
Billy Tat
5c083c320a Remove version-latest dir
Originally added due to some unexpected versioning behavior that's no longer reproducible

Apply suggestions from code review

Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>
2023-10-12 10:26:54 -07:00
Billy Tat
e60feac44c Merge pull request #896 from moio/revise_hardware_recommendations
Revise hardware recommendations
2023-10-12 09:09:41 -07:00
Jiaqi Luo
d2a00b73e4 call out the options that Rancher handles differently with the upstream RKE2 and K3s (#904) 2023-10-11 14:52:03 -07:00
Marty Hernandez Avedon
e89fd0494f Apply suggestions from code review 2023-10-11 15:44:01 -04:00
Pietro Dell'Amore
1f1c43eccf Improve rancher security docs
This commit will improve the public documentation related to rancher-security.
2023-10-11 11:02:51 -03:00
Silvio Moioli
5c83f5a6cc Merge branch 'main' into revise_hardware_recommendations 2023-10-11 10:17:52 +02:00
pdellamore
b9154c57d7 Update docs/reference-guides/rancher-security/rancher-security-best-practices.md
Co-authored-by: Paulo Gomes <paulo.gomes.uk@gmail.com>
2023-10-10 10:01:18 -03:00
Silvio Moioli
01dc68f1cb tuning-and-best-practices-for-rancher-at-scale: comma fixes
Signed-off-by: Silvio Moioli <silvio@moioli.net>
2023-10-10 13:27:55 +02:00
Silvio Moioli
d5b649a6ca uniform thousand numbers
Signed-off-by: Silvio Moioli <silvio@moioli.net>
2023-10-10 13:26:08 +02:00
Pietro Dell'Amore
aaf628caf6 Improve documentation
Add more context to endpoint exposure decisions and also add more details into
the documentation.
2023-10-09 11:45:38 -03:00
Pietro Dell'Amore
1aafb1b436 fix conflicts 2023-10-09 11:32:21 -03:00