yeasy
4f92b3aa70
fix(19.3): add security trade-off note for cAdvisor privileged: true
...
The cAdvisor compose examples in 19.3.3 use `privileged: true`, which
contradicts the minimum-privilege / cap_drop=all guidance in chapter 18.
Add an explicit trade-off note before the first cAdvisor snippet
explaining the inconsistency and pointing to 18.4 for capability-based
hardening alternatives (cap_add: [SYS_ADMIN] + device_cgroup_rules
instead of full privileged mode).
This addresses the Round 1 review finding about pedagogical conflict
between the monitoring and security chapters.
2026-05-20 00:18:37 -07:00
yeasy
ef5a97fa09
Fix VirtioFS note, cri-socket, componentstatuses, ES version and typo
2026-05-13 08:26:24 +00:00
yeasy
99c56217f5
Fix Chinese curly quote direction
2026-04-29 05:21:02 +00:00
yeasy
e416a1be7e
Fix Docker Hub rate limits, DCT timeline, image tags, etcd and Alertmanager
2026-04-27 01:15:52 +00:00
yeasy
8ea52620cc
Update Prometheus to v3.11.2, fix etcdctl version
2026-04-25 22:39:33 +00:00
yeasy
1e9cdeea3f
Update Grafana to v13, add version notes
2026-04-25 15:50:13 +00:00
yeasy
515ba9f64a
Add blank lines before lists per CommonMark
2026-04-25 15:13:27 +00:00
yeasy
839a63f5af
Update versions and fix formatting issues
2026-04-25 15:10:43 +00:00
yeasy
20a3479f8a
Add Docker Scout, remove deprecated type_name
2026-04-25 15:02:24 +00:00
yeasy
52329fee5a
Update etcd to v3.5.29
2026-04-25 15:00:47 +00:00
yeasy
8093b198ce
Update node-exporter to v1.11.1, fcct to butane
2026-04-25 14:58:40 +00:00
yeasy
77a537df54
Add blank lines before lists per CommonMark
2026-04-25 14:57:09 +00:00
yeasy
2a7f7d9a3d
Fix apt cache cleanup path in Dockerfile example
2026-04-23 13:16:21 -07:00
yeasy
544ede8498
Pin Prometheus and Grafana image versions
2026-04-22 12:24:31 -07:00
yeasy
c9c72618c3
Refresh k8s docker versions and references
2026-04-21 20:57:33 -07:00
yeasy
077e55f494
Update software versions and fix security refs
2026-04-18 19:04:14 -07:00
yeasy
d81405a807
Update versions and fix stale data
2026-04-17 21:17:12 -07:00
Baohua Yang
b67d5367dc
chore: update content and add generated PDF
2026-03-27 08:43:47 -07:00
yeasy
046d241ee5
Update cAdvisor dive hadolint versions
2026-03-26 20:04:37 -07:00
yeasy
76c2ae50fe
Add blank lines around headers
2026-03-24 09:27:04 -07:00
yeasy
44b1307277
Remove blank lines after code block markers
2026-03-21 22:36:09 -07:00
yeasy
370949f226
Add blank lines before headers
2026-03-21 12:57:51 -07:00
yeasy
c02a8a41cd
Update container runtime guidance
2026-03-16 20:49:00 -07:00
yeasy
b9c63a5133
Polish Docker workflow formatting
2026-03-16 00:32:49 -07:00
yeasy
a16e0879c0
Improve READMEs and add contribution prompts
2026-03-09 20:04:21 -07:00
yeasy
2b96c9c340
Upgrade EFK stack and cAdvisor versions
2026-03-09 20:04:16 -07:00
baohua
20a69d1662
Fix typography
2026-03-09 20:04:13 -07:00
baohua
9c2d5eeb2e
Add performance optimization
2026-03-05 21:20:06 -08:00
Baohua Yang
44c580c412
Reduce image size
2026-02-27 19:23:28 -08:00
Baohua Yang
5f32350c12
Add more content and fix format
2026-02-25 21:06:21 -08:00
Baohua Yang
5e8d7252be
Simplify words and fix format issues
2026-02-24 22:01:02 -08:00
Baohua Yang
f0c6d7de95
Fix wrong links
2026-02-22 16:04:41 -08:00
Baohua Yang
8c77a9aa99
Fix missing links
2026-02-22 13:40:20 -08:00
Baohua Yang
347c38e8bc
Fix naming of the chapter dir
2026-02-22 12:42:15 -08:00
yeasy