13 Commits

Author SHA1 Message Date
Ron Stone
f125a8b892 Remove spurious escapes (r8,dsR8)
This change addresses a long-standing issue in rST documentation imported from XML.
That import process added backslash escapes in front of various characters. The three
most common being '(', ')', and '_'.
These instances are removed.

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: Id43a9337ffcd505ccbdf072d7b29afdb5d2c997e
2023-03-01 11:19:04 +00:00
Elaine Fonaro
cfed9ee0dc Add a note users to lock/unlock controller nodes after installing a ssl_ca
- Added a note for lock/unlock controler node.
- Added a reference for installing a root CA.

Closes-bug: 1995145

Signed-off-by: Elaine Fonaro <elaine.fonaro@windriver.com>
Change-Id: I293ecc19348308e60da7f5922d169c455b895576
2022-12-19 21:33:33 -03:00
Zuul
58b8df70eb Merge "Use control-plane label for nodeSelector and Tolerations" 2022-11-30 12:35:25 +00:00
Boovan Rajendran
a5a3205277 Use control-plane label for nodeSelector and Tolerations
Comments pertaining to the Stx 8.0 Release Notes in this Gerrit review
will be addressed by Juanita in this story.

Story: 2010441
Task: 46867

Upstream has deprecated 'node-role.kubernetes.io/master'
to use 'node-role.kubernetes.io/control-plane' in k8s 1.24.

Platform and applications need to be updated to use 'control-plane'
with nodeSelector/Tolerations so we may upgrade from 'master'.

This updates pod nodeSelector to use
'node-role.kubernetes.io/control-plane' instead of
'node-role.kubernetes.io/master'.

This updates pod Tolerations to support both:
- 'node-role.kubernetes.io/master'
- 'node-role.kubernetes.io/control-plane'

This commit updates the documentation examples to reflect the above specified changes.

This r8-0-release-notes-6a6ef57f4d99.rst topic has been created to only address updates in Line 745 to 747.

Story: 2010301
Task: 46670

Signed-off-by: Boovan Rajendran <boovan.rajendran@windriver.com>
Change-Id: I1722a025664c70f78a21fdc02fd7750935ef2bc4
2022-11-23 16:15:55 +00:00
Elisamara Aoki Goncalves
f57ff3fb99 Update oidc certificate yaml (r7,dsR7)
Closes-bug: 1994888

Signed-off-by: Elisamara Aoki Goncalves <elisamaraaoki.goncalves@windriver.com>
Change-Id: I5018c5acc34ef478c5b768830e0f7ccd5594581d
2022-10-26 16:02:13 -03:00
Ron Stone
4868e1c226 Spelling and typo fixes
Based on sphinx spellchecker testing/refinement.

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: Ibfe9b6d7bc8bf044a7fff0ac7e362e4067b17989
2022-08-16 16:19:27 -04:00
Elisamara Aoki Goncalves
b20a6233f2 Platform Application Components updates oidc-dex
Story: 2009838
Task: 45597

Signed-off-by: Elisamara Aoki Goncalves <elisamaraaoki.goncalves@windriver.com>
Change-Id: Ia3a0e3e5308221bc8ad1c66cdbb6b1a6046fc32b
2022-06-13 10:18:12 -03:00
Ron Stone
66aaeca8ab typos in OIDC AUTH DOCS for WRCP 21.12
Codeblock updates

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: I277f17ece1062adc9e7c3c6948c8c4745cdcba4e
2022-01-31 13:11:00 -05:00
Ron Stone
3e03a0bc82 Cert-Manager Use for StarlingX Platform Services
Initial draft procedures.
Resolve merge conflicts.
Incorporate patchset 1 review comments.
Incorporate patchset 2 review comments.
Incorporate patchset 3 review comments.
Incorporate patchset 4 review comments. Open questions for J. Sun to be addressed.
Incorporate patchset 5 review comments.
Made sample url used in overrides generic.
Incorporate patchset 8 review comments.
Added note about issuer_root_ca recommended by J. Sun.
Incorporate patchset 10 review comments.
Fix formatting issue in output.
Incorporate patchset 12 review comments.

Story: 2007361
Task: 42625

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: I5a73f902902acc02baccb92995f696a4b19fb773
2021-12-14 11:30:07 -05:00
Ron Stone
48b10b81e2 DEX github 404 error (pick)
Updated stale external link in Sec. doc.

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: If5d98e321b9d5a998d70a8bbe4a653102b9e1acf
2021-10-25 16:33:58 +00:00
egoncalv
cd607d6d64 Updated Security Guide
Added last Note, Step 5, and Step 6 to the file "configure-oidc-auth-applications" in the Security Guide

Patch 1: Acted on comments by Adil

Patch 2: Acted on comments by Greg and Jerry

Signed-off-by: egoncalv <elisamaraaoki.goncalves@windriver.com>
Change-Id: Iae92595a0da5cf7de3d95dd70448d306f9473aec
2021-05-07 09:09:53 -03:00
Rafael Jardim
d95c80d36f Update Security
Fixed merge conflict (RS)

Signed-off-by: Rafael Jardim <rafaeljordao.jardim@windriver.com>
Change-Id: I30b882a14196525f440db1108a56bbf862dfaf55
Signed-off-by: Ron Stone <ronald.stone@windriver.com>
2021-04-01 16:02:36 -04:00
Keane Lim
3c5fa979a4 Security guide update
Re-organized topic hierarchy

Tiny edit to restart review workflow.

Squashed with Resolved index.rst conflict commit

Change-Id: I13472792cb19d1e9975ac76c6954d38054d606c5
Signed-off-by: Keane Lim <keane.lim@windriver.com>
Signed-off-by: MCamp859 <maryx.camp@intel.com>
2021-03-12 15:10:40 -05:00