Commit Graph

795 Commits

Author SHA1 Message Date
Andy Pitcher
7b36e0f01c Update rke1-self-assessment-guide-with-cis-v1.7 2023-09-15 22:49:25 -04:00
Billy Tat
33309f8734 Clean up unused directories/files 2023-09-15 16:32:17 -07:00
Jiaqi Luo
bcfd5b25aa Add the instruction for enable API audit log in downstream clusters (#824) 2023-09-13 16:05:50 -07:00
Tom Lebreux
f6a70125b1 Convert all helm-template instructions to helm-install (#828)
* Adjust command to install cert-manager

The directory `cert-manager` is not created when using `helm install`
instead of `helm template --output-dir .`.

Also, the CRDs are downloaded in the current directory, so adjust the
commands as well.

* Convert helm template to helm upgrade/install

Since we're using Helm hooks, we cannot use `helm template`, otherwise
things will break. The commands are updated to use `helm install` and
`helm upgrade`.
2023-09-13 18:02:02 -04:00
Colleen Murphy
2a1d7047df Document project quota workflow for kubectl
Along with the existing documentation for setting quotas on namespaces
with kubectl, add documentation for creating projects with quotas as
well.
2023-09-13 14:22:30 -07:00
Billy Tat
7922b74630 Merge pull request #832 from vickyhella/vk-bilingual
Fix broken links and update Chinese docs
2023-09-13 14:06:55 -07:00
Marty Hernandez Avedon
ef5ab63ddd #686 clarify when values should be raw or manually base64 encoded (#761)
* 686 clarify when values should be raw or manually base64 encoded

* rm'd section as duplicate of https://ranchermanager.docs.rancher.com/reference-guides/backup-restore-configuration/backup-configuration#example-credentialsecret

* UI instructions for finding Backup: Create + link to how-to on secret creation

* sync language

* Apply suggestions from code review

Co-authored-by: Billy Tat <btat@suse.com>

---------

Co-authored-by: Billy Tat <btat@suse.com>
2023-09-13 16:29:07 -04:00
Andy Pitcher
3840a41654 Merge pull request #796 from andypitcher/rke2-hardening-guide-cis-1.7
Update rke2-hardening-guide based on CIS-1.24 and CIS-1.7
2023-09-12 13:06:54 -04:00
Andy Pitcher
89af32fc1e Merge pull request #794 from andypitcher/rke1-hardening-guide-cis-1.7
Update rke-hardening-guide based on CIS-1.24 and CIS-1.7
2023-09-12 13:03:25 -04:00
Marty Hernandez Avedon
acedf5470d #793 RKE2 cluster templates (#822)
* #793 RKE2 cluster templates #793

* syncing 2.6 after testing confirmed
2023-09-12 09:56:11 -04:00
Andy Pitcher
35067183ee Apply grammar recommendations:
- Remove latest to cis-1.7 version
- Improve wording

Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>
2023-09-11 18:18:27 -04:00
Andy Pitcher
7ae3799d6a rke2 protect-kernel-defaults and checks 2023-09-11 17:52:11 -04:00
Michael Bolot
fed7507b14 Merge pull request #816 from MbolotSuse/webhook-docs
Updating webhook docs
2023-09-11 12:36:10 -05:00
Michael Bolot
8ea5033ca6 Updating webhook docs
Updates the webhook docs to point toward the docs for individual checks,
and adds docs for common issues/version specific issues
2023-09-11 11:35:36 -05:00
Andy Pitcher
cbe7fe5d69 Remove protect-kernel-defaults 2023-09-11 11:31:45 -04:00
Marty Hernandez Avedon
946c22780a sync v2.7 page with #797 Update k3s-hardening-guide based on CIS-1.24 and CIS-1.7 (#838) 2023-09-11 11:10:12 -04:00
Andy Pitcher
8cc47cf07f Merge pull request #797 from andypitcher/k3s-hardening-guide-cis-1.7
Update k3s-hardening-guide based on CIS-1.24 and CIS-1.7
2023-09-11 10:11:50 -04:00
Marty Hernandez Avedon
ae0281478a #420 Canonical links for smaller directories (#837)
* canonicized cluster-provisioning/rke-clusters/options/options.md

* canonicized security scans

* canonicized contributing to rancher

* canonicized 'what is rancher?'
2023-09-08 17:23:37 -04:00
Marty Hernandez Avedon
82668462be #420 canonical links for FAQ (#836)
* #420 canonical links for FAQ

* missing files for 2.0-2.4, 2.5
2023-09-08 16:35:41 -04:00
Marty Hernandez Avedon
a2952cd469 #420 canonical links for Troubleshooting (#835)
* canonicized troubleshooting/kubernetes-components

* canonicized troubleshooting/other-troubleshooting-tips

* canonicized troubleshooting

* files for 2.0-2.4, and 2.5
2023-09-08 15:35:01 -04:00
Marty Hernandez Avedon
d5e9e0d111 #748 Update info about which K8s distros can enable ACE (#749)
* 748 Update info about which K8s distros can enable ACE

* rephrase, typo fix, links, acronyms

* avilable > available

* Rancher, not Kubernetes

* Apply suggestions from code review

Co-authored-by: Brad Davidson <brad@oatmail.org>
Co-authored-by: Billy Tat <btat@suse.com>

* added missing 2.6 page

* ace available on imported clusters as well as rancher-provisioned

---------

Co-authored-by: Brad Davidson <brad@oatmail.org>
Co-authored-by: Billy Tat <btat@suse.com>
2023-09-08 10:37:00 -04:00
vickyhella
5cd6c930f1 Fix broken links 2023-09-08 17:28:15 +08:00
Marty Hernandez Avedon
039fa9c1db Convert links to https://rancher.com/docs/rancher/v2.6 to use correct Markdown syntax (#830) 2023-09-07 21:03:12 -04:00
Marty Hernandez Avedon
f308f802e1 #790 highlight alert about folders for s3 backup config (#821)
* note added & revised wording on section about s3 backups

* added warning to backup-configuration.md

* Apply suggestions from code review

Co-authored-by: Sunil Singh <sunil.singh@suse.com>

---------

Co-authored-by: Sunil Singh <sunil.singh@suse.com>
2023-09-07 17:00:00 -04:00
Andy Pitcher
a9da000dfe Fix markdown 2023-09-07 15:34:58 -04:00
Andy Pitcher
ec43045b57 k3s doc: Update protect-kernel-defaults and remove failing checks note 2023-09-07 14:50:49 -04:00
Andy Pitcher
ef47c32541 Merge branch 'rancher:main' into k3s-hardening-guide-cis-1.7 2023-09-07 09:55:23 -04:00
Tejeev
02912f266c clarified location of project ID field (#823)
* clarified location of project  ID field

* v2.7 page sync

---------

Co-authored-by: martyav <marty.avedon@suse.com>
2023-09-06 17:49:29 -04:00
Marty Hernandez Avedon
5274e4e000 #726 - Getting Started UI instructions added to docs (#739)
* added ui instructions for cluster list to access-clusters

* re-org access-clusters so that 'Cluster List' becomes a searchable heading

* rewording

* added instructions and links for Global Settings

* added global config + retitle/rephrase

retitle to disambiguate global settings from global config

listed some relevant global config items that need more info

* correction: updated access-clusters page in /docs, not /versioned_docs

* added Nodes UI instructions

* download kubeconfig UI instructions added/modified

one file contained correct instructions but they were somewhat convoluted, as you can download the file from a page mentioned earlier in the suggested instructions and the button thery describe is an icon, not labeled with any text

* restoring formatting

* updated pathway for image list downloads

* finding rancher-images.txt

* added instructions for Apps Marketplace

* link pointing to v1 monitoring

* link pointing to v1 dashboards

* added links for v1 notifiers, logging tools

* global dns entries, global dns providers, catalog links added

* Rancher portal > Rancher UI

* updated access-clusters page

* rm note & add third way to access cluster dashboard

* heading levels

* addressed comments in global-configuration

* addressed comments for nodes-and-node-pools

* addressed comment on authorized-cluster-endpoint

* rm'd create apps steps

* updated kubeconfig download instructions

* adjusting headers

* updated images list instructions as version # is now an About link

* restored intro to monitoring-and-alerting

* KubeConfig > kubeconfig (except for naming the UI label)

* left navigation sidebar > left navigation

* Update docs/how-to-guides/new-user-guides/manage-clusters/access-clusters/authorized-cluster-endpoint.md

Co-authored-by: Billy Tat <btat@suse.com>

* applied changes to v2.7 docs

---------

Co-authored-by: Billy Tat <btat@suse.com>
2023-09-06 13:33:36 -04:00
Andy Pitcher
4ca8cfada3 Update docs/pages-for-subheaders/rke1-hardening-guide.md
Co-authored-by: Guilherme Macedo <guilherme@gmacedo.com>
2023-09-04 10:27:34 -04:00
Andy Pitcher
b36876110e Update docs/pages-for-subheaders/k3s-hardening-guide.md
Co-authored-by: Guilherme Macedo <guilherme@gmacedo.com>
2023-09-04 10:15:24 -04:00
Marty Hernandez Avedon
36f84327ea canonicized advanced user guides (#813) 2023-08-25 15:57:47 -04:00
Marty Hernandez Avedon
bea15afa17 canonicized cis-scan-guides (#812) 2023-08-25 14:35:52 -04:00
Marty Hernandez Avedon
1e4d576296 canonicized istio-setup-guide (#811) 2023-08-25 14:34:43 -04:00
Marty Hernandez Avedon
f7557d8e99 #420 - Canonical links for manage-projects (#810)
* canonicized manage-project-resource-quotas

* canonicized manage-projects
2023-08-25 14:07:44 -04:00
Andy Pitcher
fef03ce751 Update k8s version in k3s-hardening-guide.md 2023-08-24 10:56:01 +02:00
Andy Pitcher
c48f9f4162 Update notes in k3s-hardening-guide.md
Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>
2023-08-24 10:55:32 +02:00
Marty Hernandez Avedon
cc1b56c892 canonicized monitoring-alerting-guides (#804) 2023-08-23 17:18:43 -04:00
Marty Hernandez Avedon
8c850bb5a5 795 - updated contribute-to-rancher page (#805) 2023-08-23 17:18:18 -04:00
Marty Hernandez Avedon
d08532ac18 801 - correcting no-space between head tag and next line in file (#803) 2023-08-23 15:12:40 -04:00
Billy Tat
1fd885c669 Merge pull request #784 from martyav/420-pages-for-subheaders
#420 SEO Improvements: pages-for-subheaders
2023-08-22 15:23:32 -07:00
Marty Hernandez Avedon
411825bbdc #755 Update CIS Benchmark note (#791)
* #755 Update CIS Benchmark note

* Update docs/how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark.md

Co-authored-by: Billy Tat <btat@suse.com>

* syncing version-2.7

---------

Co-authored-by: Billy Tat <btat@suse.com>
2023-08-22 16:55:33 -04:00
Marty Hernandez Avedon
d9bf7f41a5 canonicized prometheus-federator-guides (#800) 2023-08-22 16:55:09 -04:00
Marty Hernandez Avedon
95b8aa9530 canonicized monitoring-v2-configuration-guides (#799) 2023-08-22 15:59:23 -04:00
Marty Hernandez Avedon
aca79758ee Update hardening guide links with broken redirects (#798)
While testing a build, I noticed that the self-assment guide redirects weren't resolving from pages-for-subheaders/rancher-hardening-guides.md. I updated the links on that page to point to the current name for those pages. When I tested the links in docusaurus.config, it seemed like the redirects were formatted correctly and pointed to the right paths. I know we had a similar issue some months ago with other redirects. Updating the links on pages-for-subheaders/rancher-hardening-guides.md is a quick fix -- we still need to look into why the redirects weren't resolving.
2023-08-22 12:13:10 -04:00
Andy Pitcher
a09eb326a7 Update k3s-hardening-guide based on CIS-1.24 and CIS-1.7 by removing --protect-kernel-defaults and updating notes 2023-08-22 17:47:23 +02:00
Andy Pitcher
0b9a2bc991 Update rke-hardening-guide based on CIS-1.24 and CIS-1.7 by removing --protect-kernel-defaults and updating notes 2023-08-22 16:56:10 +02:00
Marty Hernandez Avedon
aed5f8fbbe #787 - Update reference to outdated UI label (#792) 2023-08-18 09:51:09 -04:00
Billy Tat
379e447b2b Merge pull request #788 from martyav/736-update-info-related-to-eks-instance-resource-tags
#736 update info related to eks instance resource tags
2023-08-16 08:23:16 -07:00
Marty Hernandez Avedon
ef7a25fab8 #420 SEO Improvements: new-user-guides (#783)
* canonicized new-user-guides

* missing versioned_docs
2023-08-15 16:08:51 -04:00