Max Sokolovsky
637f6a1c54
Merge pull request #509 from maxsokolovsky/2.6-update-azuread-permission-recommendations
...
[2.6] Add to the note about Azure AD permission recommendations
2023-03-27 10:23:31 -04:00
Max Sokolovsky
8664d43800
[2.6] Add to the note about Azure AD permission recommendations
2023-03-24 16:54:10 -04:00
Max Sokolovsky
4a80c72620
Merge pull request #507 from maxsokolovsky/update-azuread-permission-recommendations
...
Add to the note about Azure AD permission recommendations
2023-03-24 16:40:33 -04:00
Max Sokolovsky
06e5b9d1a0
Add to the note about Azure AD permission recommendations
2023-03-24 15:17:07 -04:00
40936468b4
[2.7.2] #462 Add instructions for how to use PSACT ( #489 )
...
* #462 Add Add instructions for how to use PSACT
* started adding instructions for adding/editing a cluster
* started adding instructions for add/editing a psa template
* instructions for rke2/k3s, note about cis
* updated to include RKE1 instructions
* wording
* nipicky word choice: applied > described
* Apply suggestions from code review
Co-authored-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com >
* tabs, added suggestion on RKe2 link from thread
* sidebars, correcting language in hardening guide
* link, switching where list of exempt namespaces is placed, corrections - users edit the PSA config, not PSS, to establish restrictions on pods
* update link
* added final save/create instructions
* Apply suggestions from code review
Co-authored-by: Billy Tat <btat@suse.com >
* updated file names
* missing metadata key
* corrected links
* Delete psa-config-template.md
File shouldn't still be in the tree, as it was renamed
* Apply suggestions from code review
Co-authored-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com >
* syncing RKE1 and 2 hardening guides, title update
* moved sample config file, added - to list of required exempt namespaces
* added moved config file to sidebars.js
---------
Co-authored-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com >
Co-authored-by: Billy Tat <btat@suse.com >
2023-03-24 15:04:15 -04:00
Klaus Kämpf
3b371ab635
Fix links to fleet.rancher.io ( #506 )
...
The Fleet documentation got restructured a while ago, breaking many
links from rancher/rancher-docs
Signed-off-by: Klaus Kämpf <kkaempf@suse.de >
2023-03-24 11:02:47 -04:00
Marty Hernandez Avedon
9a6dadaf40
[DO NOT MERGE] #300 Missing documentation: Rancher monitoring requires port 10254 ( #451 )
...
* #300 Missing documentation: Rancher monitoring requires port 10254
* capitalization
* line break typo
* typo in heading
* additional context for when you may have to open port 10254
* reworded note about 10254 and v1/pushprox
* clarified what setting indicates pushprox is disabled
* typo
2023-03-24 10:37:42 -04:00
Marty Hernandez Avedon
73334f6d62
Merge pull request #505 from crobby/40149update
...
Adding fleet-default to list of exceptions for restricted clusters
2023-03-23 10:55:10 -04:00
Chad Roberts
7c8199790e
Adding fleet-default to list of exceptions for restricted clusters
2023-03-23 10:29:43 -04:00
Marty Hernandez Avedon
23b262a1ac
close tag
2023-03-22 10:38:33 -04:00
Marty Hernandez Avedon
96d77a95ca
Merge pull request #498 from martyav/487-instructions-for-preparing-to-upgrade-hardened-imported-or-custom-RKE2-or-K3s-cluster
...
[2.7.2] #487 Instructions for Preparing Hardened Imported/Custom RKE2/K3s Cluster for Upgrade from 1.24 to 1.25
2023-03-22 10:19:43 -04:00
Marty Hernandez Avedon and Billy Tat
9ea3c3640a
Update docs/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrade-a-hardened-cluster-to-k8s-v1-25.md
...
Co-authored-by: Billy Tat <btat@suse.com >
2023-03-21 17:18:55 -04:00
Marty Hernandez Avedon and Billy Tat
c2381be890
Apply suggestions from code review
...
Co-authored-by: Billy Tat <btat@suse.com >
2023-03-21 17:03:32 -04:00
bbd1595d87
Apply suggestions from code review
...
Co-authored-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com >
Co-authored-by: Billy Tat <btat@suse.com >
2023-03-21 15:49:48 -04:00
kyr and Billy Tat
fbea12b5d8
Update docs/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli.md
...
Co-authored-by: Billy Tat <btat@suse.com >
2023-03-21 20:26:36 +01:00
kyr and Billy Tat
bc9cff3a13
Update docs/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli.md
...
Co-authored-by: Billy Tat <btat@suse.com >
2023-03-21 20:26:01 +01:00
Marty Hernandez Avedon and Billy Tat
770d58ffb9
Apply suggestions from code review
...
Co-authored-by: Billy Tat <btat@suse.com >
2023-03-21 14:28:09 -04:00
Billy Tat
11346cf607
Merge pull request #503 from doflamingo721/update-cis-benchmark-docs
...
[release/v2.7.2] Update rancher-cis-benchmark installation guide.
2023-03-21 08:35:13 -07:00
Billy Tat
632aaa27ec
Use admonition syntax
2023-03-21 08:34:47 -07:00
Vaishnav Gaikwad
6d146c1f41
update cis-benchmark installation guide
2023-03-21 16:14:18 +05:30
Enes Malik Sen and Marty Hernandez Avedon
d7f9ab67cc
Update versioned_docs/version-2.5/how-to-guides/advanced-user-guides/manage-clusters/access-clusters/use-kubectl-and-kubeconfig.md
...
Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com >
2023-03-21 09:41:05 +01:00
martyav
2e13013f6b
one more set of steps added
2023-03-20 18:01:52 -04:00
martyav
5235e2f426
changed file name, added sidebar entry
2023-03-20 17:41:27 -04:00
martyav
3c95c3bdda
added instructions for updating K8s thru UI
2023-03-20 17:31:16 -04:00
dgiebert
5323ae3ab1
Added instructions for enabling Istio CNI on k3s ( #480 )
...
* Added instructions for enabling Istio CNI on k3s
* Use tabs for rke2 + k3s
* Implement spellcheck feedback
2023-03-20 09:28:23 -07:00
Kyr Shatskyy
4388ffb703
Make a note about KUBECONFIG environment variable.
...
A new to k3s user might get "surprised" by error messages from kubectl
or k3s like:
WARN[0000] Unable to read /etc/rancher/k3s/k3s.yaml, please start server with --write-kubeconfig-mode to modify kube config permissions
error: error loading config file "/etc/rancher/k3s/k3s.yaml": open /etc/rancher/k3s/k3s.yaml: permission denied
It can happen when there is a k3s installed on the same machine and
`/etc/rancher/k3s/k3s.yaml` present.
Signed-off-by: Kyr Shatskyy <kyrylo.shatskyy@suse.com >
2023-03-17 23:35:30 +01:00
Kyr Shatskyy
10802befe2
Give a user better idea how INSTALL_K3S_VERSION could look
...
Instead of sending user to find the real number k3s tag format,
just give recent version of k3s which is needed by latest
rancher.
It would be great to update this value automatically, but I have
no good idea how to do this at the moment.
Signed-off-by: Kyr Shatskyy <kyrylo.shatskyy@suse.com >
2023-03-17 23:06:00 +01:00
Billy Tat
d48546c707
Remove <br> so link renders correctly ( #494 )
2023-03-17 15:02:55 -07:00
Marty Hernandez Avedon
86b4b5fd97
Typo fix for link ( #497 )
...
* typo fix for link
* added fix for versioned docs
2023-03-17 15:00:53 -07:00
Kyr Shatskyy
d33b296b9b
Accent the need of INSTALL_K3S_VERSION parameter
...
Move the clause about INSTALL_K3S_VERSION before get.k3s.io
cluster installation command example to emphasize its requirement
to get the correct version of k3s on which the rancher should will
be installed, because it can be an annoying mistake that user might
start from setup from scratch.
Signed-off-by: Kyr Shatskyy <kyrylo.shatskyy@suse.com >
2023-03-17 22:45:08 +01:00
martyav
bd1cfccef3
#487 Instructions for Preparing Hardened Imported/Custom RKE2/K3s Cluster for Upgrade from 1.24 to 1.25
2023-03-17 16:51:15 -04:00
Enes Malik Sen
0475d47edc
Hint for authorized cluster endpoints with rke2 and k3s
2023-03-17 17:23:40 +01:00
d5b67bb7ec
[2.7.2] Update PSS docs ( #479 )
...
* Update PSS docs
Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com >
* Update namespace exemption list
Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com >
* Apply suggestions from code review
Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com >
* typo fix for docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies.md
* Removing rancher-operator-system
* Removing rancher-operator-system
* Update docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md
Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com >
* Update docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md
Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com >
---------
Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com >
Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com >
Co-authored-by: Caleb Bron <cbron@users.noreply.github.com >
2023-03-13 14:38:04 -07:00
Billy Tat
da145c71a4
Merge pull request #483 from kourosh7/kourosh7-patch-1
...
Update field label to "Container Image" to match UI
2023-03-10 11:46:08 -08:00
Billy Tat
bfe1791de5
Update field label to say 'Container Image' as shown in the UI
2023-03-10 11:10:19 -08:00
Billy Tat
3b0ceffe94
Merge pull request #486 from martyav/update-support-matrix-links
...
updating links to support matrix in installation-requirements
2023-03-10 11:06:32 -08:00
martyav
5d6755d4e4
updating links to point to /all-supported-versions to fix problem with redirects pointing to 2.6.3, not the latest Rancher version
2023-03-10 12:14:58 -05:00
Billy Tat
9ff1727619
Merge pull request #484 from btat/main-to-release/v2.7.2
...
Main to release/v2.7.2
2023-03-09 16:33:19 -08:00
Billy Tat
1907f7f134
Merge branch 'main' into main-to-release/v2.7.2
2023-03-09 16:31:04 -08:00
Max Sokolovsky
f25e2633d2
Merge pull request #474 from maxsokolovsky/2.7-auth-provider-cleanup
...
[2.7] Add notes about disabling an auth provider
2023-03-09 17:38:38 -05:00
Marty Hernandez Avedon
70f38c0bc9
minor spacing issues
2023-03-09 17:37:47 -05:00
Kourosh Maneshni
6cbc1a670d
Update workload-ingress.md
...
Update section 1. Deploying a Workload> step #7 to say "Container Image" as shown in the UI.
2023-03-09 13:46:30 -08:00
Billy Tat
e67d7686b3
Merge pull request #478 from macedogm/v2.7.2-hardening-guides-update
...
[2.7.2] Update and restructure hardening guides
2023-03-09 08:59:22 -08:00
Billy Tat
58d34d8bdd
Merge pull request #468 from rancher/release/v2.6.11
...
Release/v2.6.11 to main
2023-03-08 11:09:54 -08:00
Billy Tat
5408e21c98
Merge pull request #482 from btat/main-to-release/v2.7.2
...
Main to release/v2.7.2
2023-03-08 10:51:13 -08:00
Billy Tat
17a240fb7b
Merge remote-tracking branch 'upstream/main' into main-to-release/v2.7.2
2023-03-08 10:44:35 -08:00
Guilherme Macedo
e3f8deb695
Update and restructure hardening guides pages
...
Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com >
2023-03-08 15:42:46 -03:00
Billy Tat
3c50c59e49
Merge pull request #466 from sunilarjun/Moving-cluster-templates-to-manage-cluster
...
Moving manage-cluster-templates.md into Manage Clusters
2023-03-07 14:14:40 -08:00
Sunil Singh
278777d657
Adding in correct from statement including redirects for new and advanced
...
Signed-off-by: Sunil Singh <sunil.singh@suse.com >
2023-03-07 13:51:35 -08:00
Sunil Singh
7025c1c37b
The CI is not able to build and test the website with paths that are redirected but do not exist, so removingthe old path to comply with build requirements.
...
Signed-off-by: Sunil Singh <sunil.singh@suse.com >
2023-03-07 12:23:49 -08:00