Go to file

Feilong Wang 16344a5a95 Add separated CA cert for etcd and front-proxy

Support creating different for k8s, etcd and front-proxy for
security hardening. We're following some best practices[1][2] but
adjusted based on the current Magnum deployment approach.

[1] https://kubernetes.io/docs/setup/best-practices/certificates/
[2] https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/

Task: 40687
Story: 2008031

Change-Id: I523a4a85867f82d234ba1f3e6fad8b8cd2291182

2021-04-01 17:31:34 +00:00

api-ref/source

Add separated CA cert for etcd and front-proxy

2021-04-01 17:31:34 +00:00

contrib

Add master_lb_enabled to cluster

2020-07-21 11:07:33 +12:00

devstack

Switch to uwsgi and enable named uri

2021-02-03 17:30:40 +00:00

doc

[goal] Deprecate the JSON formatted policy file

2021-03-08 15:11:01 +00:00

dockerfiles

[hca] Use fedora:rawhide now that greenlet 0.4.16 is released

2020-06-05 08:40:23 +00:00

etc/magnum

[fedora-atomic][k8s] Support default Keystone auth policy file

2019-06-11 11:57:15 +12:00

magnum

Add separated CA cert for etcd and front-proxy

2021-04-01 17:31:34 +00:00

playbooks

[hca] Only build/push stable images if unpublished

2021-03-03 12:21:18 +00:00

releasenotes

[goal] Deprecate the JSON formatted policy file

2021-03-08 15:11:01 +00:00

specs

Document use of kube_tag label

2018-02-13 13:40:34 +00:00

tools

[ci] Use stestr for coverage and fail if below 90%

2020-07-31 14:56:40 +00:00

.coveragerc

Cleanup coverage configuration

2016-08-28 21:11:07 +01:00

.gitignore

Add fedora coreos cluster template to contributor docs

2020-07-30 12:20:39 +12:00

.gitreview

OpenDev Migration Patch

2019-04-19 19:44:16 +00:00

.mailmap

Initial commit from github (squashed)

2014-11-18 09:23:37 -05:00

.stestr.conf

Switch to stestr

2018-07-13 13:05:52 +07:00

.zuul.yaml

Drop lower constraints testing

2021-01-11 12:07:06 +01:00

babel.cfg

Initial commit from github (squashed)

2014-11-18 09:23:37 -05:00

bindep.txt

CI: Install debianutils and vim

2020-11-27 12:45:59 +00:00

CONTRIBUTING.rst

Ussuri contributor docs community goal

2020-04-21 00:42:46 +00:00

functional_creds.conf.sample

Use keystone v3 for functional tests

2016-12-05 15:21:09 +01:00

HACKING.rst

Add a hacking rule for string interpolation at logging

2017-07-15 14:49:45 +08:00

LICENSE

Initial commit from github (squashed)

2014-11-18 09:23:37 -05:00

lower-constraints.txt

[goal] Deprecate the JSON formatted policy file

2021-03-08 15:11:01 +00:00

README.rst

Add wiki Admin guide and Contributing notes link to README

2019-10-04 17:28:36 +08:00

requirements.txt

[goal] Deprecate the JSON formatted policy file

2021-03-08 15:11:01 +00:00

setup.cfg

[goal] Deprecate the JSON formatted policy file

2021-03-08 15:11:01 +00:00

setup.py

Cleanup py27 support

2020-04-05 09:45:17 +02:00

test-requirements.txt

Fix gate - update lower-constraints

2021-01-04 09:31:37 +00:00

tox.ini

Add separated CA cert for etcd and front-proxy

2021-04-01 17:31:34 +00:00

README.rst

Team and repository tags

Magnum

Magnum is an OpenStack project which offers container orchestration engines for deploying and managing containers as first class resources in OpenStack.

For more information, please refer to the following resources:

Free software: under the Apache license <http://www.apache.org/licenses/LICENSE-2.0>
Wiki: https://wiki.openstack.org/wiki/Magnum_
Documentation: https://docs.openstack.org/magnum/latest/
Admin guide: https://docs.openstack.org/magnum/latest/admin/index.html
Source: https://opendev.org/openstack/magnum
Blueprints: https://blueprints.launchpad.net/magnum
Bugs: https://storyboard.openstack.org/#!/project/openstack/magnum
REST Client: https://opendev.org/openstack/python-magnumclient
Release notes: https://docs.openstack.org/releasenotes/magnum/index.html
Contributing: https://docs.openstack.org/magnum/latest/contributor/index.html