From d0ee62976a82ec740c0ddda60e8e01aca5196155 Mon Sep 17 00:00:00 2001 From: Zach Puckett Date: Tue, 5 Dec 2017 14:21:16 -0600 Subject: [PATCH 1/8] add secret to glossary --- _data/glossary/secret.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 _data/glossary/secret.yml diff --git a/_data/glossary/secret.yml b/_data/glossary/secret.yml new file mode 100644 index 0000000000..b2f7738fa8 --- /dev/null +++ b/_data/glossary/secret.yml @@ -0,0 +1,14 @@ +id: secret +name: Secret +full-link: /docs/concepts/configuration/secret/ +related: +- pods +- volume +tags: +- core-object +- security +short-description: > + stores sensitive information, such as passwords, OAuth tokens, and ssh keys. +long-description: > + Sensetive information stored in a Secret allows for more control over how it is used and reduces the risk of accidental exposure. + A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a {% glossary_tooltip text="Volume" term_id="volume" %} mount or by the kubelet pulling images for a pod. From 7c3a88e224db995db804b6984e153c53d2302314 Mon Sep 17 00:00:00 2001 From: Zach Puckett Date: Tue, 5 Dec 2017 14:28:56 -0600 Subject: [PATCH 2/8] update to account for volume missing in glossary --- _data/glossary/secret.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_data/glossary/secret.yml b/_data/glossary/secret.yml index b2f7738fa8..8fd6e9d36b 100644 --- a/_data/glossary/secret.yml +++ b/_data/glossary/secret.yml @@ -11,4 +11,4 @@ short-description: > stores sensitive information, such as passwords, OAuth tokens, and ssh keys. long-description: > Sensetive information stored in a Secret allows for more control over how it is used and reduces the risk of accidental exposure. - A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a {% glossary_tooltip text="Volume" term_id="volume" %} mount or by the kubelet pulling images for a pod. + A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a volume mount or by the kubelet pulling images for a pod. From 7a43b1f7f84e316decbfcac7fe1ee1dc1bcea504 Mon Sep 17 00:00:00 2001 From: Zach Puckett Date: Tue, 5 Dec 2017 14:35:38 -0600 Subject: [PATCH 3/8] cleanup long description --- _data/glossary/secret.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/_data/glossary/secret.yml b/_data/glossary/secret.yml index 8fd6e9d36b..b6e27dabcc 100644 --- a/_data/glossary/secret.yml +++ b/_data/glossary/secret.yml @@ -8,7 +8,7 @@ tags: - core-object - security short-description: > - stores sensitive information, such as passwords, OAuth tokens, and ssh keys. + Stores sensitive information, such as passwords, OAuth tokens, and ssh keys. long-description: > - Sensetive information stored in a Secret allows for more control over how it is used and reduces the risk of accidental exposure. + Allows for more control over how sensistive information is used and reduces the risk of accidental exposure. A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a volume mount or by the kubelet pulling images for a pod. From 464037d569481e835ee5fb354d127d5ed7afab4b Mon Sep 17 00:00:00 2001 From: Zach Puckett Date: Tue, 5 Dec 2017 14:56:55 -0600 Subject: [PATCH 4/8] update to include encryption and reference to configMaps --- _data/glossary/secret.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/_data/glossary/secret.yml b/_data/glossary/secret.yml index b6e27dabcc..392fff9119 100644 --- a/_data/glossary/secret.yml +++ b/_data/glossary/secret.yml @@ -10,5 +10,6 @@ tags: short-description: > Stores sensitive information, such as passwords, OAuth tokens, and ssh keys. long-description: > - Allows for more control over how sensistive information is used and reduces the risk of accidental exposure. - A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a volume mount or by the kubelet pulling images for a pod. + Allows for more control over how sensistive information is used and reduces the risk of accidental exposure, including [encryption](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#ensure-all-secrets-are-encrypted) at rest. + A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a volume mount or by the kubelet pulling images for a pod. + Secrets are great for confidential data and [ConfigMaps](https://kubernetes.io/docs/tasks/configure-pod-container/configmap/) for non-confidential data. From 748ae7ec7c3978319bb173cc55ea2e1ea7d74a5a Mon Sep 17 00:00:00 2001 From: Zach Puckett Date: Tue, 5 Dec 2017 15:02:08 -0600 Subject: [PATCH 5/8] fix typo --- _data/glossary/secret.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_data/glossary/secret.yml b/_data/glossary/secret.yml index 392fff9119..1565df28f8 100644 --- a/_data/glossary/secret.yml +++ b/_data/glossary/secret.yml @@ -10,6 +10,6 @@ tags: short-description: > Stores sensitive information, such as passwords, OAuth tokens, and ssh keys. long-description: > - Allows for more control over how sensistive information is used and reduces the risk of accidental exposure, including [encryption](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#ensure-all-secrets-are-encrypted) at rest. + Allows for more control over how sensitive information is used and reduces the risk of accidental exposure, including [encryption](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#ensure-all-secrets-are-encrypted) at rest. A {% glossary_tooltip text="Pod" term_id="pod" %} references the secret as a file in a volume mount or by the kubelet pulling images for a pod. Secrets are great for confidential data and [ConfigMaps](https://kubernetes.io/docs/tasks/configure-pod-container/configmap/) for non-confidential data. From f0eedc60d4d7b83d8ab27176ef68817c8aa343bc Mon Sep 17 00:00:00 2001 From: "Sahdev P. Zala" Date: Tue, 5 Dec 2017 16:09:54 -0500 Subject: [PATCH 6/8] Create glossary for kubelet Add kubelet to the glossary. --- _data/glossary/kubelet.yaml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 _data/glossary/kubelet.yaml diff --git a/_data/glossary/kubelet.yaml b/_data/glossary/kubelet.yaml new file mode 100644 index 0000000000..71d6470984 --- /dev/null +++ b/_data/glossary/kubelet.yaml @@ -0,0 +1,10 @@ +id: kubelet +name: Kubelet +full-link: docs/reference/generated/kubelet +tags: +- fundamental +- core-object +short-description: > + An agent that runs on each node. +long-description: > + The kubelet takes a set of PodSpecs that are provided through various mechanisms and ensures that the containers described in those PodSpecs are running and healthy. The kubelet doesn’t manage containers which were not created by Kubernetes. From 496012e3c6053d2a500e0682a31f5ed84428666b Mon Sep 17 00:00:00 2001 From: radhikapc Date: Tue, 5 Dec 2017 16:13:14 -0600 Subject: [PATCH 7/8] added resource quota glosary item --- _data/glossary/resource-quota.yaml | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 _data/glossary/resource-quota.yaml diff --git a/_data/glossary/resource-quota.yaml b/_data/glossary/resource-quota.yaml new file mode 100644 index 0000000000..b8e8adf4f8 --- /dev/null +++ b/_data/glossary/resource-quota.yaml @@ -0,0 +1,11 @@ +id: resource-quota +name: Resource Quotas +full-link: /docs/concepts/policy/resource-quotas/ +tags: +- fundamental +- operation +- architecture +short-description: > + Provides constraints that limit aggregate resource consumption per {% glossary_tooltip term_id="namespace" %}. +long-description: > + Limits the quantity of objects that can be created in a namespace by type, as well as the total amount of compute resources that may be consumed by resources in that project. From a28892fcb0c7144d39eb31bb18cf97e566d36d94 Mon Sep 17 00:00:00 2001 From: "Sahdev P. Zala" Date: Tue, 5 Dec 2017 22:59:45 -0500 Subject: [PATCH 8/8] Create glossary for kubelet Add kubelet to the glossary --- _data/glossary/kubelet.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_data/glossary/kubelet.yaml b/_data/glossary/kubelet.yaml index 71d6470984..4728339907 100644 --- a/_data/glossary/kubelet.yaml +++ b/_data/glossary/kubelet.yaml @@ -5,6 +5,6 @@ tags: - fundamental - core-object short-description: > - An agent that runs on each node. + An agent that runs on each node in the cluster. It makes sure that containers are running in a pod. long-description: > The kubelet takes a set of PodSpecs that are provided through various mechanisms and ensures that the containers described in those PodSpecs are running and healthy. The kubelet doesn’t manage containers which were not created by Kubernetes.