Skip to content

Commit 25a926e

Browse files
author
Tim Bannister
committed
Assume that kind provides Pod Security Admission
Given that Pod Security Admission has been beta and then generally available for a while, assume that kind gives the reader a cluster than includes this feature.
1 parent c38e5c0 commit 25a926e

File tree

4 files changed

+20
-22
lines changed

4 files changed

+20
-22
lines changed

content/en/docs/tutorials/security/cluster-level-pss.md

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -42,22 +42,22 @@ that are most appropriate for your configuration, do the following:
4242
1. Create a cluster with no Pod Security Standards applied:
4343

4444
```shell
45-
kind create cluster --name psa-wo-cluster-pss --image kindest/node:v1.24.0
45+
kind create cluster --name psa-wo-cluster-pss
4646
```
47-
The output is similar to this:
47+
The output is similar to:
4848
```
4949
Creating cluster "psa-wo-cluster-pss" ...
50-
✓ Ensuring node image (kindest/node:v1.24.0) 🖼
51-
✓ Preparing nodes 📦
50+
✓ Ensuring node image (kindest/node:v{{< skew currentVersion >}}.0) 🖼
51+
✓ Preparing nodes 📦
5252
✓ Writing configuration 📜
5353
✓ Starting control-plane 🕹️
5454
✓ Installing CNI 🔌
5555
✓ Installing StorageClass 💾
5656
Set kubectl context to "kind-psa-wo-cluster-pss"
5757
You can now use your cluster with:
58-
58+
5959
kubectl cluster-info --context kind-psa-wo-cluster-pss
60-
60+
6161
Thanks for using kind! 😊
6262
```
6363

@@ -72,7 +72,7 @@ that are most appropriate for your configuration, do the following:
7272
Kubernetes control plane is running at https://127.0.0.1:61350
7373
7474
CoreDNS is running at https://127.0.0.1:61350/api/v1/namespaces/kube-system/services/kube-dns:dns/proxy
75-
75+
7676
To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.
7777
```
7878

@@ -255,22 +255,22 @@ following:
255255
these Pod Security Standards:
256256
257257
```shell
258-
kind create cluster --name psa-with-cluster-pss --image kindest/node:v1.24.0 --config /tmp/pss/cluster-config.yaml
258+
kind create cluster --name psa-with-cluster-pss --config /tmp/pss/cluster-config.yaml
259259
```
260260
The output is similar to this:
261261
```
262262
Creating cluster "psa-with-cluster-pss" ...
263-
✓ Ensuring node image (kindest/node:v1.24.0) 🖼
264-
✓ Preparing nodes 📦
265-
✓ Writing configuration 📜
266-
✓ Starting control-plane 🕹️
267-
✓ Installing CNI 🔌
268-
✓ Installing StorageClass 💾
263+
✓ Ensuring node image (kindest/node:v{{< skew currentVersion >}}.0) 🖼
264+
✓ Preparing nodes 📦
265+
✓ Writing configuration 📜
266+
✓ Starting control-plane 🕹️
267+
✓ Installing CNI 🔌
268+
✓ Installing StorageClass 💾
269269
Set kubectl context to "kind-psa-with-cluster-pss"
270270
You can now use your cluster with:
271-
271+
272272
kubectl cluster-info --context kind-psa-with-cluster-pss
273-
273+
274274
Have a question, bug, or feature request? Let us know! https://kind.sigs.k8s.io/#community 🙂
275275
```
276276

content/en/docs/tutorials/security/ns-level-pss.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,14 +31,14 @@ Install the following on your workstation:
3131
1. Create a `KinD` cluster as follows:
3232

3333
```shell
34-
kind create cluster --name psa-ns-level --image kindest/node:v1.23.0
34+
kind create cluster --name psa-ns-level
3535
```
3636

3737
The output is similar to this:
3838

3939
```
4040
Creating cluster "psa-ns-level" ...
41-
✓ Ensuring node image (kindest/node:v1.23.0) 🖼
41+
✓ Ensuring node image (kindest/node:v{{< skew currentVersion >}}.0) 🖼
4242
✓ Preparing nodes 📦
4343
✓ Writing configuration 📜
4444
✓ Starting control-plane 🕹️

content/en/examples/security/kind-with-cluster-level-baseline-pod-security.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ nodes:
5151
# default None
5252
propagation: None
5353
EOF
54-
kind create cluster --name psa-with-cluster-pss --image kindest/node:v1.23.0 --config /tmp/pss/cluster-config.yaml
54+
kind create cluster --name psa-with-cluster-pss --config /tmp/pss/cluster-config.yaml
5555
kubectl cluster-info --context kind-psa-with-cluster-pss
5656
# Wait for 15 seconds (arbitrary) ServiceAccount Admission Controller to be available
5757
sleep 15

content/en/examples/security/kind-with-namespace-level-baseline-pod-security.sh

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,5 @@
11
#!/bin/sh
2-
# Until v1.23 is released, kind node image needs to be built from k/k master branch
3-
# Ref: https://kind.sigs.k8s.io/docs/user/quick-start/#building-images
4-
kind create cluster --name psa-ns-level --image kindest/node:v1.23.0
2+
kind create cluster --name psa-ns-level
53
kubectl cluster-info --context kind-psa-ns-level
64
# Wait for 15 seconds (arbitrary) ServiceAccount Admission Controller to be available
75
sleep 15

0 commit comments

Comments
 (0)