Merge pull request #3 from Rishit-dagli/main

Merged main dev-1.28

OWNERS_ALIASES

@@ -140,13 +140,15 @@ aliases:
     - chenrui333
     - howieyuen
     - mengjiao-liu
+    - my-git9
     - SataQiu
     - Sea-n
     - tanjunchen
     - tengqm
     - windsonsea
     - xichengliudui
   sig-docs-zh-reviews: # PR reviews for Chinese content
+    - asa3311
     - chenrui333
     - chenxuc
     - howieyuen

content/de/docs/tasks/tools/install-kubectl-linux.md

@@ -39,10 +39,10 @@ Um kubectl auf Linux zu installieren, gibt es die folgenden Möglichkeiten:
    {{< note >}}
    Um eine spezifische Version herunterzuladen, ersetze `$(curl -L -s https://dl.k8s.io/release/stable.txt)` mit der spezifischen Version.
 
-   Um zum Beispiel Version {{< param "fullversion" >}} auf Linux herunterzuladen:
+   Um zum Beispiel Version {{< skew currentPatchVersion >}} auf Linux herunterzuladen:
 
    ```bash
-   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/linux/amd64/kubectl
+   curl -LO https://dl.k8s.io/release/v{{< skew currentPatchVersion >}}/bin/linux/amd64/kubectl
    ```
    {{< /note >}}
 
@@ -139,7 +139,7 @@ Um kubectl auf Linux zu installieren, gibt es die folgenden Möglichkeiten:
 2. Den öffentlichen Google Cloud Signaturschlüssel herunterladen:
 
    ```shell
-   sudo curl -fsSLo /etc/apt/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
+   curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-archive-keyring.gpg
    ```
 
 3. Kubernetes zum `apt` Repository:
@@ -170,7 +170,7 @@ name=Kubernetes
 baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-\$basearch
 enabled=1
 gpgcheck=1
-gpgkey=https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
+gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
 EOF
 sudo yum install -y kubectl
 ```

content/de/docs/tasks/tools/install-kubectl-macos.md

@@ -44,16 +44,16 @@ Um kubectl auf macOS zu installieren, gibt es die folgenden Möglichkeiten:
    {{< note >}}
    Um eine spezifische Version herunterzuladen, ersetze `$(curl -L -s https://dl.k8s.io/release/stable.txt)` mit der spezifischen Version
 
-   Um zum Beispiel Version {{< param "fullversion" >}} auf Intel macOS herunterzuladen:
+   Um zum Beispiel Version {{< skew currentPatchVersion >}} auf Intel macOS herunterzuladen:
 
    ```bash
-   curl -LO "https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl"
+   curl -LO "https://dl.k8s.io/release/v{{< skew currentPatchVersion >}}/bin/darwin/amd64/kubectl"
    ```
 
    Für macOS auf Apple Silicon (z.B. M1/M2):
 
    ```bash
-   curl -LO "https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/arm64/kubectl"
+   curl -LO "https://dl.k8s.io/release/v{{< skew currentPatchVersion >}}/bin/darwin/arm64/kubectl"
    ```
 
    {{< /note >}}

content/de/docs/tasks/tools/install-kubectl.md

@@ -197,10 +197,10 @@ Sie können kubectl als Teil des Google Cloud SDK installieren.
 
     Um eine bestimmte Version herunterzuladen, ersetzen Sie den Befehlsteil `$(curl -LS https://dl.k8s.io/release/stable.txt)` mit der jeweiligen Version.
 
-    Um beispielsweise die Version {{< param "fullversion" >}} auf macOS herunterzuladen, verwenden Sie den folgenden Befehl:
+    Um beispielsweise die Version {{< skew currentPatchVersion >}} auf macOS herunterzuladen, verwenden Sie den folgenden Befehl:
 		
     ```
-    curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl
+    curl -LO https://dl.k8s.io/release/v{{< skew currentPatchVersion >}}/bin/darwin/amd64/kubectl
     ```
 
 2. Machen Sie die kubectl-Binärdatei ausführbar.
@@ -225,10 +225,10 @@ Sie können kubectl als Teil des Google Cloud SDK installieren.
 
     Um eine bestimmte Version herunterzuladen, ersetzen Sie den Befehlsteil `$(curl -LS https://dl.k8s.io/release/stable.txt)` mit der jeweiligen Version.
 
-    Um beispielsweise die Version {{< param "fullversion" >}} auf Linux herunterzuladen, verwenden Sie den folgenden Befehl:
+    Um beispielsweise die Version {{< skew currentPatchVersion >}} auf Linux herunterzuladen, verwenden Sie den folgenden Befehl:
 
     ```
-    curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/linux/amd64/kubectl
+    curl -LO https://dl.k8s.io/release/v{{< skew currentPatchVersion >}}/bin/linux/amd64/kubectl
     ```
 
 2. Machen Sie die kubectl-Binärdatei ausführbar.
@@ -244,12 +244,12 @@ Sie können kubectl als Teil des Google Cloud SDK installieren.
     ```
 {{% /tab %}}
 {{% tab name="Windows" %}}
-1. Laden Sie das aktuellste Release {{< param "fullversion" >}} von [diesem link](https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe) herunter.
+1. Laden Sie das aktuellste Release {{< skew currentPatchVersion >}} von [diesem link](https://dl.k8s.io/release/v{{< skew currentPatchVersion >}}/bin/windows/amd64/kubectl.exe) herunter.
 
     Oder, sofern Sie `curl` installiert haven, verwenden Sie den folgenden Befehl:
 
     ```
-    curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe
+    curl -LO https://dl.k8s.io/release/v{{< skew currentPatchVersion >}}/bin/windows/amd64/kubectl.exe
     ```
 
     Informationen zur aktuellen stabilen Version (z. B. für scripting) finden Sie unter [https://dl.k8s.io/release/stable.txt](https://dl.k8s.io/release/stable.txt).

content/en/blog/_posts/2017-12-00-Introducing-Kubeflow-Composable.md

@@ -127,13 +127,13 @@ Note how we set those parameters so they are used only when you deploy to GKE. Y
 
 After training, you [export your model](https://www.tensorflow.org/serving/serving_basic) to a serving location.  
 
-Kubeflow also includes a serving package as well. In a separate example, we trained a standard Inception model, and stored the trained model in a bucket we’ve created called ‘gs://kubeflow-models’ with the path ‘/inception’.  
+Kubeflow also includes a serving package as well.  
 
 To deploy a the trained model for serving, execute the following:  
 
 ```  
      ks generate tf-serving inception --name=inception  
-     ---namespace=default --model\_path=gs://kubeflow-models/inception  
+     ---namespace=default --model\_path=gs://$bucket_name/$model_loc
      ks apply gke -c inception  
 ```  
 
@@ -170,3 +170,6 @@ Thank you for your support so far, we could not be more excited!
 
 _Jeremy Lewi & David Aronchick_
 Google
+
+Note:
+* This article was amended in June 2023 to update the trained model bucket location.

content/en/blog/_posts/2023-05-24-oci-security-profiles.md

@@ -116,7 +116,6 @@ are a bunch of registries that already supports OCI artifacts:
 - [Amazon Elastic Container Registry](https://aws.amazon.com/ecr)
 - [Google Artifact Registry](https://cloud.google.com/artifact-registry)
 - [GitHub Packages container registry](https://docs.github.com/en/packages/guides/about-github-container-registry)
-- [Bundle Bar](https://bundle.bar/docs/supported-clients/oras)
 - [Docker Hub](https://hub.docker.com)
 - [Zot Registry](https://zotregistry.io)
 

content/en/blog/_posts/2023-06-09-dl-adopt-cdn.md

@@ -0,0 +1,94 @@
+---
+layout: blog
+title: "dl.k8s.io to adopt a Content Delivery Network"
+date: 2023-06-09
+slug: dl-adopt-cdn
+---
+
+**Authors**: Arnaud Meukam (VMware), Hannah Aubry (Fastly), Frederico
+Muñoz (SAS Institute)
+
+We're happy to announce that dl.k8s.io, home of the official Kubernetes
+binaries, will soon be powered by [Fastly](https://www.fastly.com).
+
+Fastly is known for its high-performance content delivery network (CDN) designed
+to deliver content quickly and reliably around the world. With its powerful
+network, Fastly will help us deliver official Kubernetes binaries to users
+faster and more reliably than ever before.
+
+The decision to use Fastly was made after an extensive evaluation process in
+which we carefully evaluated several potential content delivery network
+providers. Ultimately, we chose Fastly because of their commitment to the open
+internet and proven track record of delivering fast and secure digital
+experiences to some of the most known open source projects (through their [Fast
+Forward](https://www.fastly.com/fast-forward) program).
+
+## What you need to know about this change
+
+- On Monday, July 24th, the IP addresses and backend storage associated with the
+  dl.k8s.io domain name will change.
+- The change will not impact the vast majority of users since the domain
+  name will remain the same.
+- If you restrict access to specific IP ranges, access to the dl.k8s.io domain
+  could stop working.
+
+If you think you may be impacted or want to know more about this change,
+please keep reading.
+
+## Why are we making this change
+
+The official Kubernetes binaries site, dl.k8s.io, is used by thousands of users
+all over the world, and currently serves _more than 5 petabytes of binaries each
+month_. This change will allow us to improve access to those resources by
+leveraging a world-wide CDN.
+
+## Does this affect dl.k8s.io only, or are other domains also affected?
+
+Only dl.k8s.io will be affected by this change.
+
+## My company specifies the domain names that we are allowed to be accessed. Will this change affect the domain name?
+
+No, the domain name (`dl.k8s.io`) will remain the same: no change will be
+necessary, and access to the Kubernetes release binaries site should not be
+affected.
+
+## My company uses some form of IP filtering. Will this change affect access to the site?
+
+If IP-based filtering is in place, it’s possible that access to the site will be
+affected when the new IP addresses become active.
+
+## If my company doesn’t use IP addresses to restrict network traffic, do we need to do anything?
+
+No, the switch to the CDN should be transparent.
+
+## Will there be a dual running period?
+
+**No, it is a cutover.** You can, however, test your networks right now to check
+if they can route to the new public IP addresses from Fastly.  You should add
+the new IPs to your network's `allowlist` before July 24th. Once the transfer is
+complete, ensure your networks use the new IP addresses to connect to
+the `dl.k8s.io` service.
+
+## What are the new IP addresses?
+
+If you need to manage an allow list for downloads, you can get the ranges to
+match from the Fastly API, in JSON: [public IP address
+ranges](https://api.fastly.com/public-ip-list).  You don't need any credentials
+to download that list of ranges.
+
+## What next steps would you recommend?
+
+If you have IP-based filtering in place, we recommend the following course of
+action **before July, 24th**:
+
+- Add the new IP addresses to your allowlist.
+- Conduct tests with your networks/firewall to ensure your networks can route to
+  the new IP addresses.
+
+After the change is made, we recommend double-checking that HTTP calls are
+accessing dl.k8s.io with the new IP addresses.
+
+## What should I do if I detect some abnormality after the cutover date?
+
+If you encounter any weirdness during binaries download, please [open an
+issue](https://github.com/kubernetes/k8s.io/issues/new/choose).