website icon indicating copy to clipboard operation
website copied to clipboard

Update encryption-at-rest task page

Open sftim opened this issue 3 years ago • 28 comments
trafficstars

Revise Encrypting Secret Data at Rest [preview]

This is an overall PR and I am splitting out smaller PRs - scroll down to see more

  • ~Use HTML table [preview] in place of harder-to-read Markdown version.~
  • assume that encryption at rest is available; no need to check cluster version is compatible
  • clarify purpose of task
  • use more glossary tooltips
  • improve page headings
  • style tweaks

Split PRs (current / recent set):

  • ~https://github.com/kubernetes/website/pull/44622~
  • ~https://github.com/kubernetes/website/pull/44951~

sftim avatar Apr 28 '22 15:04 sftim

Pull request preview available for checking

Built without sensitive environment variables

Name Link
Latest commit c91ebf4498a55cbd94318db8071ee58b9f16cdc0
Latest deploy log https://app.netlify.com/sites/kubernetes-io-main-staging/deploys/6635077f5fd5b7000936e697
Deploy Preview https://deploy-preview-33285--kubernetes-io-main-staging.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

netlify[bot] avatar Apr 28 '22 15:04 netlify[bot]

@divya-mohan0209 are you happy with the changes I made here?

sftim avatar Jun 27 '22 08:06 sftim

I'll rebase this against current main.

sftim avatar Aug 06 '22 15:08 sftim

@divya-mohan0209 would you be willing to re-review these changes?

sftim avatar Aug 08 '22 18:08 sftim

/retitle [WIP] Update encryption-at-rest task page

sftim avatar Sep 15 '22 12:09 sftim

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

  • After 90d of inactivity, lifecycle/stale is applied
  • After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
  • After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

  • Mark this issue or PR as fresh with /remove-lifecycle stale
  • Mark this issue or PR as rotten with /lifecycle rotten
  • Close this issue or PR with /close
  • Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

k8s-triage-robot avatar Dec 21 '22 12:12 k8s-triage-robot

/remove-lifecycle stale

divya-mohan0209 avatar Dec 21 '22 12:12 divya-mohan0209

Hey @sftim , believe you'll need to rebase this against main all over again. I know you're swamped, please feel free to do this whenever you have some cycles free.

divya-mohan0209 avatar Jan 15 '23 08:01 divya-mohan0209

/retitle Update encryption-at-rest task page

I had another go!

sftim avatar Feb 15 '23 21:02 sftim

@divya-mohan0209 if you do have time, I think this is ready for another look

sftim avatar Feb 15 '23 21:02 sftim

Hi @sftim . Generally, good stuff. I wrote up a few areas to look into. Is a tech review a good idea?

kbhawkey avatar Feb 20 '23 22:02 kbhawkey

@sftim @tengqm Are the main comments answered? Is there more to do? What about a tech review? @kubernetes/sig-security-pr-reviews

kbhawkey avatar Feb 25 '23 01:02 kbhawkey

CLA Signed

The committers listed above are authorized under a signed CLA.

  • :white_check_mark: login: sftim / name: Tim Bannister (20d7c73d02504927815e16c5522df0a569b535ab, c91ebf4498a55cbd94318db8071ee58b9f16cdc0)

I think I'll need to turn this into an overall PR and split the changes out into smaller individual PRs. I'll focus on the CLA fix for those smaller PRs, once I have time to make them.

sftim avatar Apr 21 '23 08:04 sftim

/hold

I'll split off PRs from this and wait for those to be reviewed. Should be done within a year or so, potentially less.

sftim avatar Jun 10 '23 08:06 sftim

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: Once this PR has been reviewed and has the lgtm label, please ask for approval from sftim. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment Approvers can cancel approval by writing /approve cancel in a comment

k8s-ci-robot avatar Jul 13 '23 21:07 k8s-ci-robot

:thinking:, prompted by https://github.com/kubernetes/website/pull/33285/files#r1114309593

I would like to end up with:

  • “Encryption in Kubernetes” (concept page)
  • “Change the encryption key for API encryption at rest” (task page)
  • “Set up API encryption at rest” (task page)
  • “Migrate away from API encryption at rest” (task page, go back to identity for some or all APIs).

sftim avatar Sep 06 '23 19:09 sftim

Slightly relevant to https://github.com/kubernetes/website/issues/44169

sftim avatar Dec 01 '23 13:12 sftim

@sftim , If you have another pull request that has this content, would you close this pull request. It will help us clean up outstanding pull requests. Thanks

kbhawkey avatar Dec 20 '23 13:12 kbhawkey

This is an overall PR that I am slowly splitting out into smaller PRs. I plan to leave this open because:

  • it may shrink to a reviewable size - as the split-out PRs merge, there is less left to do
  • the deploy preview lets people see changes from a split-out PR in their wider context

For an example of a split-out PR, see https://github.com/kubernetes/website/pull/42882 or https://github.com/kubernetes/website/pull/42883

sftim avatar Dec 20 '23 13:12 sftim

To move this forward, please review or approve https://github.com/kubernetes/website/pull/44085.

sftim avatar Dec 20 '23 13:12 sftim

To move this forward, please review or approve https://github.com/kubernetes/website/pull/44532.

sftim avatar Jan 03 '24 23:01 sftim

To move this forward, please review or approve https://github.com/kubernetes/website/pull/44532 or https://github.com/kubernetes/website/pull/44622.

sftim avatar Jan 03 '24 23:01 sftim

To move this forward, please review or approve https://github.com/kubernetes/website/pull/44622 or https://github.com/kubernetes/website/pull/44675.

sftim avatar Jan 08 '24 17:01 sftim

taena mga palo ah

Pxyzi3c avatar Feb 10 '24 12:02 Pxyzi3c

To move this forward, please review https://github.com/kubernetes/website/pull/44622, or suggest another part of the page that I can split out.

sftim avatar Mar 31 '24 16:03 sftim

I'd be happy to see these changes land in one batch, if that's feasible; if not, please see PR https://github.com/kubernetes/website/pull/44622

sftim avatar Apr 01 '24 14:04 sftim

See https://github.com/kubernetes/website/pull/44622 which I recommend reviewing before this one.

sftim avatar May 01 '24 11:05 sftim

Doubt I'll find time to finish this.

/close

sftim avatar Jul 25 '24 21:07 sftim

@sftim: Closed this PR.

In response to this:

Doubt I'll find time to finish this.

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

k8s-ci-robot avatar Jul 25 '24 21:07 k8s-ci-robot