openstack/magnum
Code Issues Proposed changes
Container Infrastructure Management Service for OpenStack
5,273 Commits 7 Branches 57 Tags 94 MiB
Python 73%
Shell 26.7%
Dockerfile 0.3%
16344a5a95
Go to file
Feilong Wang 16344a5a95 Add separated CA cert for etcd and front-proxy 
Support creating different for k8s, etcd and front-proxy for
security hardening. We're following some best practices[1][2] but
adjusted based on the current Magnum deployment approach.

[1] https://kubernetes.io/docs/setup/best-practices/certificates/
[2] https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/

Task: 40687
Story: 2008031

Change-Id: I523a4a85867f82d234ba1f3e6fad8b8cd2291182
2021-04-01 17:31:34 +00:00
api-ref/source Add separated CA cert for etcd and front-proxy 2021-04-01 17:31:34 +00:00
contrib Add master_lb_enabled to cluster 2020-07-21 11:07:33 +12:00
devstack Switch to uwsgi and enable named uri 2021-02-03 17:30:40 +00:00
doc [goal] Deprecate the JSON formatted policy file 2021-03-08 15:11:01 +00:00
dockerfiles [hca] Use fedora:rawhide now that greenlet 0.4.16 is released 2020-06-05 08:40:23 +00:00
etc/magnum [fedora-atomic][k8s] Support default Keystone auth policy file 2019-06-11 11:57:15 +12:00
magnum Add separated CA cert for etcd and front-proxy 2021-04-01 17:31:34 +00:00
playbooks [hca] Only build/push stable images if unpublished 2021-03-03 12:21:18 +00:00
releasenotes [goal] Deprecate the JSON formatted policy file 2021-03-08 15:11:01 +00:00
specs Document use of kube_tag label 2018-02-13 13:40:34 +00:00
tools [ci] Use stestr for coverage and fail if below 90% 2020-07-31 14:56:40 +00:00
.coveragerc Cleanup coverage configuration 2016-08-28 21:11:07 +01:00
.gitignore Add fedora coreos cluster template to contributor docs 2020-07-30 12:20:39 +12:00
.gitreview OpenDev Migration Patch 2019-04-19 19:44:16 +00:00
.mailmap Initial commit from github (squashed) 2014-11-18 09:23:37 -05:00
.stestr.conf Switch to stestr 2018-07-13 13:05:52 +07:00
.zuul.yaml Drop lower constraints testing 2021-01-11 12:07:06 +01:00
babel.cfg Initial commit from github (squashed) 2014-11-18 09:23:37 -05:00
bindep.txt CI: Install debianutils and vim 2020-11-27 12:45:59 +00:00
CONTRIBUTING.rst Ussuri contributor docs community goal 2020-04-21 00:42:46 +00:00
functional_creds.conf.sample Use keystone v3 for functional tests 2016-12-05 15:21:09 +01:00
HACKING.rst Add a hacking rule for string interpolation at logging 2017-07-15 14:49:45 +08:00
LICENSE Initial commit from github (squashed) 2014-11-18 09:23:37 -05:00
lower-constraints.txt [goal] Deprecate the JSON formatted policy file 2021-03-08 15:11:01 +00:00
README.rst Add wiki Admin guide and Contributing notes link to README 2019-10-04 17:28:36 +08:00
requirements.txt [goal] Deprecate the JSON formatted policy file 2021-03-08 15:11:01 +00:00
setup.cfg [goal] Deprecate the JSON formatted policy file 2021-03-08 15:11:01 +00:00
setup.py Cleanup py27 support 2020-04-05 09:45:17 +02:00
test-requirements.txt Fix gate - update lower-constraints 2021-01-04 09:31:37 +00:00
tox.ini Add separated CA cert for etcd and front-proxy 2021-04-01 17:31:34 +00:00

README.rst

Team and repository tags

image

Magnum

Magnum is an OpenStack project which offers container orchestration engines for deploying and managing containers as first class resources in OpenStack.

For more information, please refer to the following resources: