Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
92 commits
Select commit Hold shift + click to select a range
c4d31da
replace html-inline with shortcodes in the tutorial
Andygol Apr 19, 2025
61948f1
[zh] Add 2025-05-08-volume-populators-ga/index.md
windsonsea May 20, 2025
44461fb
[bn] Upgrade mysql image version used by Single-Instance Stateful tut…
serut May 7, 2025
8f38676
[pl] docs/concepts/overview/working-with-objects/field-selectors.md
dkarczmarski Jun 22, 2025
6332644
feat: move styles to separate file
SayakMukhopadhyay Mar 23, 2025
70b19e2
[pl] sync with PR 51302
dkarczmarski Jul 1, 2025
3707dce
en: fix non-functional link
Mujib-Ahasan Jun 28, 2025
f38e8d2
[pl] sync with PR 51406
dkarczmarski Jul 5, 2025
c9d98e7
[zh-cn]sync kubectl_scale kubectl_taint
my-git9 Jul 7, 2025
80199ab
[zh-cn]sync kubectl_debug
my-git9 Jul 7, 2025
4813a4f
[zh-cn]sync cri
my-git9 Jun 25, 2025
958d5fc
[zh] Sync admission-controllers.md
windsonsea Jul 8, 2025
f57c7d5
fixing hyperlink
fedebongio Jul 8, 2025
94021d6
Merge pull request #51546 from windsonsea/admller
k8s-ci-robot Jul 8, 2025
d0fcf1e
Merge pull request #51547 from fedebongio/fedebongio-fix-doc
k8s-ci-robot Jul 8, 2025
04f16d8
[zh] Add two feature gates for reference
windsonsea Jul 8, 2025
031f646
Merge pull request #51419 from Mujib-Ahasan/fix-link
k8s-ci-robot Jul 8, 2025
e4814c2
[zh-cn]sync validating-admission-policy.md
my-git9 Jul 8, 2025
ebcfab6
Merge pull request #50213 from SayakMukhopadhyay/sidebar-tree-styling…
k8s-ci-robot Jul 8, 2025
1277685
[pl] sync with PR 51419
dkarczmarski Jul 8, 2025
95536ac
Merge pull request #51550 from my-git9/npa-13752
k8s-ci-robot Jul 9, 2025
83e774b
Merge pull request #51378 from my-git9/npa-26073
k8s-ci-robot Jul 9, 2025
5caf1f7
Merge pull request #51548 from windsonsea/strfea
k8s-ci-robot Jul 9, 2025
6080f7f
[zh-cn]sync kubectl_top_pod.md
my-git9 Jul 9, 2025
dbd7921
Update scale-intro.md
l0f3n Jul 9, 2025
7e6b395
Update service-proxy-name comment to be more descriptive
kylepl Jul 9, 2025
32a96c8
Merge pull request #50986 from windsonsea/volpop
k8s-ci-robot Jul 10, 2025
b338a74
Update content/zh-cn/docs/concepts/cluster-administration/admission-w…
FouoF Jul 10, 2025
2e9756e
Merge pull request #51570 from FouoF/fix-admission-cn
k8s-ci-robot Jul 10, 2025
8edd2f2
Merge pull request #51531 from my-git9/npa-2332
k8s-ci-robot Jul 10, 2025
de653f5
Merge pull request #51530 from my-git9/npa-1020
k8s-ci-robot Jul 10, 2025
5f37189
[zh] Add hardening-guide/scheduler.md
windsonsea Jun 6, 2025
feea375
Fix typo: identitiy ➔ identity in security context docs
markof88 Jul 10, 2025
be026b5
Merge pull request #50556 from Andygol/tutorial-shortcodes
k8s-ci-robot Jul 10, 2025
252adb1
Documentation for Swap memory management
iholder101 Jun 19, 2025
ccfb648
Remove old swap docs from 'nodes' page
iholder101 Jun 19, 2025
bec9d0d
Add a tutorial to provision and configure swap on a node
iholder101 Jun 22, 2025
24b1f35
Add a linux-security doc entry
iholder101 Jun 22, 2025
cbe99fe
secrets-good-practices.md to include a reference to swap best practices
iholder101 Jun 22, 2025
5739f69
[zh-cn]sync kubernetes-basics/_index.md
my-git9 Jul 11, 2025
026bc66
[zh-cn]sync scale-intro update-intro
my-git9 Jul 11, 2025
6f2effa
Merge pull request #51188 from windsonsea/hargui
k8s-ci-robot Jul 11, 2025
5d20a4f
[pl] sync tutorials/kubernetes-basics/_index.md with PR 50556
dkarczmarski Jul 11, 2025
b290e8b
Merge pull request #51580 from dkarczmarski/pl-sync-50556-tutorials-k…
k8s-ci-robot Jul 11, 2025
c865c9e
Merge pull request #51516 from dkarczmarski/pl-sync-51406
k8s-ci-robot Jul 11, 2025
23e5b65
Merge pull request #51554 from dkarczmarski/pl-sync-51419
k8s-ci-robot Jul 11, 2025
8b80850
Merge pull request #51399 from dkarczmarski/pl-sync-51302
k8s-ci-robot Jul 11, 2025
453de59
Update _index.html
asem-hamid Jul 11, 2025
54edb61
[ja] move KubeletSeparateDiskGC feature notice inside note
Arhell Jul 11, 2025
594617d
Merge pull request #51023 from serut/main-bn
k8s-ci-robot Jul 12, 2025
dc76999
Merge pull request #51583 from asem-hamid/index-main
k8s-ci-robot Jul 12, 2025
0d94821
[pl] sync tutorials/kubernetes-basics/scale/scale-intro.md with PR 50556
dkarczmarski Jul 12, 2025
da7920f
[zh-cn]sync kubectl.md
my-git9 Jul 12, 2025
00b3775
Merge pull request #51584 from Arhell/ja-fix
k8s-ci-robot Jul 12, 2025
d21b9d7
Merge pull request #51587 from my-git9/npa-1078
k8s-ci-robot Jul 12, 2025
11ba3c7
[pl] sync tutorials/kubernetes-basics/update with PR 50556
dkarczmarski Jul 13, 2025
54dbada
[hi] Fix EOL MCR links in CRI and Windows Installation Pages
Arhell Jul 13, 2025
4e0853e
Merge pull request #51586 from dkarczmarski/pl-sync-50556-tutorials-k…
k8s-ci-robot Jul 14, 2025
e07dfcf
Merge pull request #51588 from dkarczmarski/pl-sync-50556-tutorials-k…
k8s-ci-robot Jul 14, 2025
24f19cd
Merge pull request #51591 from Arhell/hi-fix
k8s-ci-robot Jul 14, 2025
9b73786
[pt-br] Add /tasks/run-application/run-replicated-stateful-applicatio…
paulofponciano Jul 14, 2025
6921c91
Merge pull request #51566 from WhyleLabs/proxy-patch
k8s-ci-robot Jul 14, 2025
ff6ad0a
Add graz-dev as blog editor
lmktfy Jun 28, 2025
4a79bb5
Merge pull request #51410 from lmktfy/20250628_graz-dev_blog_editor
k8s-ci-robot Jul 14, 2025
b646a98
Merge pull request #51303 from iholder101/docs/swap-ga
k8s-ci-robot Jul 14, 2025
7004a73
Clarify systemd configuration based on Containerd version (#51386)
bsampson506 Jul 14, 2025
9e2daf6
Drop links to third-party projects from authentication page
aramase Jul 14, 2025
9eaa956
Add foundational content for DRA
shannonxtreme May 14, 2025
43b9942
Add glossary terms for DRA concepts
shannonxtreme May 14, 2025
c05d82f
Add embeddable examples for DRA basics
shannonxtreme Jun 26, 2025
44c0c10
Add how-to guides for basic DRA task
shannonxtreme May 26, 2025
36e9647
Merge pull request #51597 from aramase/aramase/d/authn-external-links
k8s-ci-robot Jul 14, 2025
a5bdf2c
Merge pull request #51091 from shannonxtreme/dra-docs-improve
k8s-ci-robot Jul 14, 2025
fd39336
sync container-runtimes security-context reconfigure-default-service-…
asa3311 Jul 15, 2025
a7b51ad
Merge pull request #51577 from my-git9/npa-687
k8s-ci-robot Jul 15, 2025
04da1bb
Merge pull request #51564 from l0f3n/patch-1
k8s-ci-robot Jul 15, 2025
d15c6ea
Update ingress-minikube.md
yuxing138 Jul 15, 2025
16d138f
Publish Post Quantum Crypto Blog
graz-dev Jul 15, 2025
5b3ae25
Merge pull request #51610 from yuxing138/patch-1
k8s-ci-robot Jul 15, 2025
c7d66c5
Merge pull request #51571 from markof88/patch-2
k8s-ci-robot Jul 15, 2025
dd1087f
Merge pull request #51613 from graz-dev/publish-post-quantum-crypto-blog
k8s-ci-robot Jul 15, 2025
03a4e66
Sync KubeCon 2025 events (ru)
shurup Jul 15, 2025
955bed8
[pl] sync with PR 51564
dkarczmarski Jul 15, 2025
94f2366
Fix duplicate word in post
clebs Jul 15, 2025
077e11a
Merge pull request #51619 from clebs/csi-blog-fix
k8s-ci-robot Jul 15, 2025
505245f
Merge pull request #51617 from dkarczmarski/pl-sync-51564
k8s-ci-robot Jul 15, 2025
bf991fc
Merge pull request #51336 from dkarczmarski/pl-docs-concepts-overview…
k8s-ci-robot Jul 15, 2025
6046406
Merge pull request #51616 from shurup/ru-kubecon2025-july
k8s-ci-robot Jul 16, 2025
d28ad8a
Merge pull request #51578 from my-git9/npa-30402
k8s-ci-robot Jul 16, 2025
a0bdb76
Merge pull request #51562 from my-git9/npa-1282
k8s-ci-robot Jul 16, 2025
a577a33
Merge pull request #51604 from asa3311/sync-zh-189
k8s-ci-robot Jul 16, 2025
d49bcfe
Merge main into dev-1.34 to keep in sync
Urvashi0109 Jul 16, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions OWNERS_ALIASES
Original file line number Diff line number Diff line change
@@ -1,11 +1,13 @@
aliases:
sig-docs-blog-owners: # Approvers for blog content
- lmktfy
- graz-dev
- mrbobbytables
- natalisucks
- nate-double-u
sig-docs-blog-reviewers: # Reviewers for blog content
- Gauravpadam
- graz-dev
- lmktfy
- mrbobbytables
- natalisucks
Expand Down
25 changes: 25 additions & 0 deletions assets/js/sidebar-tree.js
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
let splitInstance = null;

function enableSplitter(mediaQuery) {
if (mediaQuery.matches) {
if (!splitInstance) {
splitInstance = Split(["#sidebarnav", "#maindoc"], {
sizes: [20, 80],
minSize: 100,
});
}
} else {
if (splitInstance) {
splitInstance.destroy();
splitInstance = null;
}
}
}

const screenWidthMediaQuery = window.matchMedia("(min-width: 768px)");

const eleNav = document.getElementById("sidebarnav");
if (eleNav !== null) {
enableSplitter(screenWidthMediaQuery);
screenWidthMediaQuery.addListener(enableSplitter);
}
75 changes: 0 additions & 75 deletions assets/scss/_custom.scss
Original file line number Diff line number Diff line change
Expand Up @@ -50,35 +50,6 @@ body {
}
}

/* Gutter for sidebar splitter */
.gutter {
background-color: #eee;
background-repeat: no-repeat;
background-position: 50%;
}

.gutter.gutter-horizontal {
background-image: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAUAAAAeCAYAAADkftS9AAAAIklEQVQoU2M4c+bMfxAGAgYYmwGrIIiDjrELjpo5aiZeMwF+yNnOs5KSvgAAAABJRU5ErkJggg==');
cursor: col-resize;
}

#sidebarnav,
#maindoc {
max-width: 100%;
}

#maindoc {
overflow-wrap: break-word;
}

@media (max-width: 768px) {
#sidebarnav {
padding-left: 15px;
padding-right: 15px;
}

}

/* Complex table layout support */

.td-content, body.td-content {
Expand Down Expand Up @@ -1381,42 +1352,6 @@ body.cid-code-of-conduct main {
}
}

// search & sidebar
.td-sidebar {
@media only screen and (min-width: 768px) {
padding-top: 1.5rem !important;

.td-sidebar__inner {
top: 8.5rem;

@media only screen and (min-width: 1075px) {
top: 6.5rem;
}
}
}
}

.td-sidebar-nav {
& > .td-sidebar-nav__section {
padding-top: .5rem;
padding-left: 1.5rem;
}
}

.td-sidebar__inner {
form.td-sidebar__search {

.td-sidebar__toggle {
&:hover {
color: #000000;
}

color: $primary;
margin: 1rem;
}
}
}

.no-underline {
text-decoration: none !important;
}
Expand All @@ -1425,16 +1360,6 @@ body.cid-code-of-conduct main {
display: none !important;
}

.td-sidebar-link__page {
&#m-docs-search {
display: none;
}

&#m-docs-test {
display: none;
}
}

//Tutorials
main.content {
position: inherit;
Expand Down
75 changes: 75 additions & 0 deletions assets/scss/_k8s_sidebar-tree.scss
Original file line number Diff line number Diff line change
@@ -0,0 +1,75 @@
.td-sidebar-nav {
.td-sidebar-link.tree-root {
display: none;
}

#navbarDropdownMenuLink {
display: none;
}
}

/* Gutter for sidebar splitter */
.gutter {
background-color: #eee;
background-repeat: no-repeat;
background-position: 50%;

&.gutter-horizontal {
background-image: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAUAAAAeCAYAAADkftS9AAAAIklEQVQoU2M4c+bMfxAGAgYYmwGrIIiDjrELjpo5aiZeMwF+yNnOs5KSvgAAAABJRU5ErkJggg==');
cursor: col-resize;
}
}

#sidebarnav,
#maindoc {
max-width: 100%;
}

#maindoc {
overflow-wrap: break-word;
}

@include media-breakpoint-down(sm) {
#sidebarnav {
padding-left: 15px;
padding-right: 15px;
}
}

// search & sidebar
.td-sidebar {
@include media-breakpoint-up(sm){
padding-top: 1.5rem !important;

.td-sidebar__inner {
top: 8.5rem;

@media only screen and (min-width: 1075px) {
top: 6.5rem;
}
}
}
}

.td-sidebar-nav {
& > .td-sidebar-nav__section {
padding-top: .5rem;
padding-left: 1.5rem;
}
}

.td-sidebar__inner form.td-sidebar__search {
.td-sidebar__toggle {
&:hover {
color: #000000;
}

color: $primary;
}
}

.td-sidebar-link__page {
&#m-docs-test {
display: none;
}
}
1 change: 1 addition & 0 deletions assets/scss/_styles_project.scss
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ Add styles or import other files. */
// Base styles
@import "k8s_community";
@import "k8s_nav";
@import "k8s_sidebar-tree";

//Media queries
@import "base";
Expand Down
18 changes: 7 additions & 11 deletions content/bn/_index.html
Original file line number Diff line number Diff line change
Expand Up @@ -43,17 +43,11 @@
<h2>150+ মাইক্রোসার্ভিস কুবারনেটিসে স্থানান্তরিত করার চ্যালেঞ্জ</h2>
<p>সারাহ ওয়েলস দ্বারা, অপারেশনস এবং নির্ভরযোগ্যতার জন্য প্রযুক্তিগত পরিচালক, ফিনান্সিয়াল টাইমস</p>
<button id="desktopShowVideoButton" onclick="kub.showVideo()">ভিডিও দেখুন</button>
<br>
<br>
<a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/" button id="desktopKCButton">12-15 নভেম্বর KubeCon + CloudNativeCon North America তে যোগ দিন</a>
<br>
<br>
<br>
<a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-india/" button id="desktopKCButton">11-12 ডিসেম্বর KubeCon + CloudNativeCon India তে যোগ দিন</a>
<br>
<br>
<br>
<a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/" button id="desktopKCButton">1-4 এপ্রিল, 2025-এ KubeCon + CloudNativeCon Europe তে যোগ দিন</a>

<h3>আসন্ন KubeCon + CloudNativeCon ইভেন্টগুলিতে যোগ দিন</h3>
<a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-india/" class="desktopKCButton"><strong>India</strong> (Hyderabad, Aug 6-7)</a>
<a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/" class="desktopKCButton"><strong>North America</strong> (Atlanta, Nov 10-13)</a>
<a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-europe-2026/" class="desktopKCButton"><strong>Europe</strong> (Amsterdam, Mar 23-26, 2026)</a>
</div>
<div id="videoPlayer">
<iframe data-url="https://www.youtube.com/embed/H06qrNmGqyE?autoplay=1" frameborder="0" allowfullscreen></iframe>
Expand All @@ -64,3 +58,5 @@ <h2>150+ মাইক্রোসার্ভিস কুবারনেটি
{{< blocks/kubernetes-features >}}

{{< blocks/case-studies >}}

{{< kubeweekly id="kubeweekly" >}}
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ spec:
app: mysql
spec:
containers:
- image: mysql:5.6
- image: mysql:9
name: mysql
env:
# Use secret in real usage
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ The GA milestone indicates that Kubernetes users may depend on the feature and i

Although prior to CSI Kubernetes provided a powerful volume plugin system, it was challenging to add support for new volume plugins to Kubernetes: volume plugins were “in-tree” meaning their code was part of the core Kubernetes code and shipped with the core Kubernetes binaries—vendors wanting to add support for their storage system to Kubernetes (or even fix a bug in an existing volume plugin) were forced to align with the Kubernetes release process. In addition, third-party storage code caused reliability and security issues in core Kubernetes binaries and the code was often difficult (and in some cases impossible) for Kubernetes maintainers to test and maintain.

CSI was developed as a standard for exposing arbitrary block and file storage storage systems to containerized workloads on Container Orchestration Systems (COs) like Kubernetes. With the adoption of the Container Storage Interface, the Kubernetes volume layer becomes truly extensible. Using CSI, third-party storage providers can write and deploy plugins exposing new storage systems in Kubernetes without ever having to touch the core Kubernetes code. This gives Kubernetes users more options for storage and makes the system more secure and reliable.
CSI was developed as a standard for exposing arbitrary block and file storage systems to containerized workloads on Container Orchestration Systems (COs) like Kubernetes. With the adoption of the Container Storage Interface, the Kubernetes volume layer becomes truly extensible. Using CSI, third-party storage providers can write and deploy plugins exposing new storage systems in Kubernetes without ever having to touch the core Kubernetes code. This gives Kubernetes users more options for storage and makes the system more secure and reliable.

## What’s new?

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@
layout: blog
title: "Post-Quantum Cryptography in Kubernetes"
slug: pqc-in-k8s
date: XXXX
canonicalUrl: XXXX
date: 2025-07-18
canonicalUrl: https://www.kubernetes.dev/blog/2025/07/18/pqc-in-k8s/
author: "Fabian Kammel (ControlPlane)"
draft: true
draft: false
---

The world of cryptography is on the cusp of a major shift with the advent of
Expand Down
57 changes: 0 additions & 57 deletions content/en/docs/concepts/architecture/nodes.md
Original file line number Diff line number Diff line change
Expand Up @@ -296,63 +296,6 @@ the kubelet can use topology hints when making resource assignment decisions.
See [Control Topology Management Policies on a Node](/docs/tasks/administer-cluster/topology-manager/)
for more information.

## Swap memory management {#swap-memory}

{{< feature-state feature_gate_name="NodeSwap" >}}

To enable swap on a node, the `NodeSwap` feature gate must be enabled on
the kubelet (default is true), and the `--fail-swap-on` command line flag or `failSwapOn`
[configuration setting](/docs/reference/config-api/kubelet-config.v1beta1/)
must be set to false.
To allow Pods to utilize swap, `swapBehavior` should not be set to `NoSwap` (which is the default behavior) in the kubelet config.

{{< warning >}}
When the memory swap feature is turned on, Kubernetes data such as the content
of Secret objects that were written to tmpfs now could be swapped to disk.
{{< /warning >}}

A user can also optionally configure `memorySwap.swapBehavior` in order to
specify how a node will use swap memory. For example,

```yaml
memorySwap:
swapBehavior: LimitedSwap
```

- `NoSwap` (default): Kubernetes workloads will not use swap.
- `LimitedSwap`: The utilization of swap memory by Kubernetes workloads is subject to limitations.
Only Pods of Burstable QoS are permitted to employ swap.

If configuration for `memorySwap` is not specified and the feature gate is
enabled, by default the kubelet will apply the same behaviour as the
`NoSwap` setting.

With `LimitedSwap`, Pods that do not fall under the Burstable QoS classification (i.e.
`BestEffort`/`Guaranteed` Qos Pods) are prohibited from utilizing swap memory.
To maintain the aforementioned security and node health guarantees, these Pods
are not permitted to use swap memory when `LimitedSwap` is in effect.

Prior to detailing the calculation of the swap limit, it is necessary to define the following terms:

* `nodeTotalMemory`: The total amount of physical memory available on the node.
* `totalPodsSwapAvailable`: The total amount of swap memory on the node that is available for use by Pods
(some swap memory may be reserved for system use).
* `containerMemoryRequest`: The container's memory request.

Swap limitation is configured as:
`(containerMemoryRequest / nodeTotalMemory) * totalPodsSwapAvailable`.

It is important to note that, for containers within Burstable QoS Pods, it is possible to
opt-out of swap usage by specifying memory requests that are equal to memory limits.
Containers configured in this manner will not have access to swap memory.

Swap is supported only with **cgroup v2**, cgroup v1 is not supported.

For more information, and to assist with testing and provide feedback, please
see the blog-post about [Kubernetes 1.28: NodeSwap graduates to Beta1](/blog/2023/08/24/swap-linux-beta/),
[KEP-2400](https://github.com/kubernetes/enhancements/issues/4128) and its
[design proposal](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/2400-node-swap/README.md).

## {{% heading "whatsnext" %}}

Learn more about the following:
Expand Down
Loading