Commit Graph
7243 Commits
Author SHA1 Message Date
Max Sokolovsky 637f6a1c54 Merge pull request #509 from maxsokolovsky/2.6-update-azuread-permission-recommendations
[2.6] Add to the note about Azure AD permission recommendations
2023-03-27 10:23:31 -04:00
Max Sokolovsky 8664d43800 [2.6] Add to the note about Azure AD permission recommendations 2023-03-24 16:54:10 -04:00
Max Sokolovsky 4a80c72620 Merge pull request #507 from maxsokolovsky/update-azuread-permission-recommendations
Add to the note about Azure AD permission recommendations
2023-03-24 16:40:33 -04:00
Max Sokolovsky 06e5b9d1a0 Add to the note about Azure AD permission recommendations 2023-03-24 15:17:07 -04:00
40936468b4 [2.7.2] #462 Add instructions for how to use PSACT (#489)
* #462 Add Add instructions for how to use PSACT

* started adding instructions for adding/editing a cluster

* started adding instructions for add/editing a psa template

* instructions for rke2/k3s, note about cis

* updated to include RKE1 instructions

* wording

* nipicky word choice: applied > described

* Apply suggestions from code review

Co-authored-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>

* tabs, added suggestion on RKe2 link from thread

* sidebars, correcting language in hardening guide

* link, switching where list of exempt namespaces is placed, corrections - users edit the PSA config, not PSS, to establish restrictions on pods

* update link

* added final save/create instructions

* Apply suggestions from code review

Co-authored-by: Billy Tat <btat@suse.com>

* updated file names

* missing metadata key

* corrected links

* Delete psa-config-template.md

File shouldn't still be in the tree, as it was renamed

* Apply suggestions from code review

Co-authored-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>

* syncing RKE1 and 2 hardening guides, title update

* moved sample config file, added -  to list of required exempt namespaces

* added moved config file to sidebars.js

---------

Co-authored-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
Co-authored-by: Billy Tat <btat@suse.com>
2023-03-24 15:04:15 -04:00
Klaus Kämpf 3b371ab635 Fix links to fleet.rancher.io (#506)
The Fleet documentation got restructured a while ago, breaking many
links from rancher/rancher-docs

Signed-off-by: Klaus Kämpf <kkaempf@suse.de>
2023-03-24 11:02:47 -04:00
Marty Hernandez Avedon 9a6dadaf40 [DO NOT MERGE] #300 Missing documentation: Rancher monitoring requires port 10254 (#451)
* #300 Missing documentation: Rancher monitoring requires port 10254

* capitalization

* line break typo

* typo in heading

* additional context for when you may have to open port 10254

* reworded note about 10254 and v1/pushprox

* clarified what setting indicates pushprox is disabled

* typo
2023-03-24 10:37:42 -04:00
Marty Hernandez Avedon 73334f6d62 Merge pull request #505 from crobby/40149update
Adding fleet-default to list of exceptions for restricted clusters
2023-03-23 10:55:10 -04:00
Chad Roberts 7c8199790e Adding fleet-default to list of exceptions for restricted clusters 2023-03-23 10:29:43 -04:00
Marty Hernandez Avedon 23b262a1ac close tag 2023-03-22 10:38:33 -04:00
Marty Hernandez Avedon 96d77a95ca Merge pull request #498 from martyav/487-instructions-for-preparing-to-upgrade-hardened-imported-or-custom-RKE2-or-K3s-cluster
[2.7.2] #487 Instructions for Preparing Hardened Imported/Custom RKE2/K3s Cluster for Upgrade from 1.24 to 1.25
2023-03-22 10:19:43 -04:00
Marty Hernandez AvedonandBilly Tat 9ea3c3640a Update docs/getting-started/installation-and-upgrade/install-upgrade-on-a-kubernetes-cluster/upgrade-a-hardened-cluster-to-k8s-v1-25.md
Co-authored-by: Billy Tat <btat@suse.com>
2023-03-21 17:18:55 -04:00
Marty Hernandez AvedonandBilly Tat c2381be890 Apply suggestions from code review
Co-authored-by: Billy Tat <btat@suse.com>
2023-03-21 17:03:32 -04:00
bbd1595d87 Apply suggestions from code review
Co-authored-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
Co-authored-by: Billy Tat <btat@suse.com>
2023-03-21 15:49:48 -04:00
kyrandBilly Tat fbea12b5d8 Update docs/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli.md
Co-authored-by: Billy Tat <btat@suse.com>
2023-03-21 20:26:36 +01:00
kyrandBilly Tat bc9cff3a13 Update docs/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli.md
Co-authored-by: Billy Tat <btat@suse.com>
2023-03-21 20:26:01 +01:00
Marty Hernandez AvedonandBilly Tat 770d58ffb9 Apply suggestions from code review
Co-authored-by: Billy Tat <btat@suse.com>
2023-03-21 14:28:09 -04:00
Billy Tat 11346cf607 Merge pull request #503 from doflamingo721/update-cis-benchmark-docs
[release/v2.7.2] Update rancher-cis-benchmark installation guide.
2023-03-21 08:35:13 -07:00
Billy Tat 632aaa27ec Use admonition syntax 2023-03-21 08:34:47 -07:00
Vaishnav Gaikwad 6d146c1f41 update cis-benchmark installation guide 2023-03-21 16:14:18 +05:30
Enes Malik SenandMarty Hernandez Avedon d7f9ab67cc Update versioned_docs/version-2.5/how-to-guides/advanced-user-guides/manage-clusters/access-clusters/use-kubectl-and-kubeconfig.md
Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>
2023-03-21 09:41:05 +01:00
martyav 2e13013f6b one more set of steps added 2023-03-20 18:01:52 -04:00
martyav 5235e2f426 changed file name, added sidebar entry 2023-03-20 17:41:27 -04:00
martyav 3c95c3bdda added instructions for updating K8s thru UI 2023-03-20 17:31:16 -04:00
dgiebert 5323ae3ab1 Added instructions for enabling Istio CNI on k3s (#480)
* Added instructions for enabling Istio CNI on k3s

* Use tabs for rke2 + k3s

* Implement spellcheck feedback
2023-03-20 09:28:23 -07:00
Kyr Shatskyy 4388ffb703 Make a note about KUBECONFIG environment variable.
A new to k3s user might get "surprised" by error messages from kubectl
or k3s like:

  WARN[0000] Unable to read /etc/rancher/k3s/k3s.yaml, please start server with --write-kubeconfig-mode to modify kube config permissions
  error: error loading config file "/etc/rancher/k3s/k3s.yaml": open /etc/rancher/k3s/k3s.yaml: permission denied

It can happen when there is a k3s installed on the same machine and
`/etc/rancher/k3s/k3s.yaml` present.

Signed-off-by: Kyr Shatskyy <kyrylo.shatskyy@suse.com>
2023-03-17 23:35:30 +01:00
Kyr Shatskyy 10802befe2 Give a user better idea how INSTALL_K3S_VERSION could look
Instead of sending user to find the real number k3s tag format,
just give recent version of k3s which is needed by latest
rancher.

It would be great to update this value automatically, but I have
no good idea how to do this at the moment.

Signed-off-by: Kyr Shatskyy <kyrylo.shatskyy@suse.com>
2023-03-17 23:06:00 +01:00
Billy Tat d48546c707 Remove <br> so link renders correctly (#494) 2023-03-17 15:02:55 -07:00
Marty Hernandez Avedon 86b4b5fd97 Typo fix for link (#497)
* typo fix for link

* added fix for versioned docs
2023-03-17 15:00:53 -07:00
Kyr Shatskyy d33b296b9b Accent the need of INSTALL_K3S_VERSION parameter
Move the clause about INSTALL_K3S_VERSION before get.k3s.io
cluster installation command example to emphasize its requirement
to get the correct version of k3s on which the rancher should will
be installed, because it can be an annoying mistake that user might
start from setup from scratch.

Signed-off-by: Kyr Shatskyy <kyrylo.shatskyy@suse.com>
2023-03-17 22:45:08 +01:00
martyav bd1cfccef3 #487 Instructions for Preparing Hardened Imported/Custom RKE2/K3s Cluster for Upgrade from 1.24 to 1.25 2023-03-17 16:51:15 -04:00
Enes Malik Sen 0475d47edc Hint for authorized cluster endpoints with rke2 and k3s 2023-03-17 17:23:40 +01:00
d5b67bb7ec [2.7.2] Update PSS docs (#479)
* Update PSS docs

Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com>

* Update namespace exemption list

Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com>

* Apply suggestions from code review

Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>

* typo fix for docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies.md

* Removing rancher-operator-system

* Removing rancher-operator-system

* Update docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md

Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>

* Update docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md

Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>

---------

Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com>
Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>
Co-authored-by: Caleb Bron <cbron@users.noreply.github.com>
2023-03-13 14:38:04 -07:00
Billy Tat da145c71a4 Merge pull request #483 from kourosh7/kourosh7-patch-1
Update field label to "Container Image" to match UI
2023-03-10 11:46:08 -08:00
Billy Tat bfe1791de5 Update field label to say 'Container Image' as shown in the UI 2023-03-10 11:10:19 -08:00
Billy Tat 3b0ceffe94 Merge pull request #486 from martyav/update-support-matrix-links
updating links to support matrix in installation-requirements
2023-03-10 11:06:32 -08:00
martyav 5d6755d4e4 updating links to point to /all-supported-versions to fix problem with redirects pointing to 2.6.3, not the latest Rancher version 2023-03-10 12:14:58 -05:00
Billy Tat 9ff1727619 Merge pull request #484 from btat/main-to-release/v2.7.2
Main to release/v2.7.2
2023-03-09 16:33:19 -08:00
Billy Tat 1907f7f134 Merge branch 'main' into main-to-release/v2.7.2 2023-03-09 16:31:04 -08:00
Max Sokolovsky f25e2633d2 Merge pull request #474 from maxsokolovsky/2.7-auth-provider-cleanup
[2.7] Add notes about disabling an auth provider
2023-03-09 17:38:38 -05:00
Marty Hernandez Avedon 70f38c0bc9 minor spacing issues 2023-03-09 17:37:47 -05:00
Kourosh Maneshni 6cbc1a670d Update workload-ingress.md
Update section 1. Deploying a Workload> step #7 to say "Container Image" as shown in the UI.
2023-03-09 13:46:30 -08:00
Billy Tat e67d7686b3 Merge pull request #478 from macedogm/v2.7.2-hardening-guides-update
[2.7.2] Update and restructure hardening guides
2023-03-09 08:59:22 -08:00
Billy Tat 58d34d8bdd Merge pull request #468 from rancher/release/v2.6.11
Release/v2.6.11 to main
2023-03-08 11:09:54 -08:00
Billy Tat 5408e21c98 Merge pull request #482 from btat/main-to-release/v2.7.2
Main to release/v2.7.2
2023-03-08 10:51:13 -08:00
Billy Tat 17a240fb7b Merge remote-tracking branch 'upstream/main' into main-to-release/v2.7.2 2023-03-08 10:44:35 -08:00
Guilherme Macedo e3f8deb695 Update and restructure hardening guides pages
Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com>
2023-03-08 15:42:46 -03:00
Billy Tat 3c50c59e49 Merge pull request #466 from sunilarjun/Moving-cluster-templates-to-manage-cluster
Moving manage-cluster-templates.md into Manage Clusters
2023-03-07 14:14:40 -08:00
Sunil Singh 278777d657 Adding in correct from statement including redirects for new and advanced
Signed-off-by: Sunil Singh <sunil.singh@suse.com>
2023-03-07 13:51:35 -08:00
Sunil Singh 7025c1c37b The CI is not able to build and test the website with paths that are redirected but do not exist, so removingthe old path to comply with build requirements.
Signed-off-by: Sunil Singh <sunil.singh@suse.com>
2023-03-07 12:23:49 -08:00