22 Commits

Author SHA1 Message Date
Joao Victor Portal
d7693a2553 Update default dex helm overrides
A new override for dictionary "podLabels" was added in dex helm
overrides. This change updates the documentation.

Closes-Bug: 2058075

Depends-On: https://review.opendev.org/c/starlingx/oidc-auth-armada-app/+/913336
Change-Id: I6bf81391a28462b2adf8d72609bcb9140321d2e9
Signed-off-by: Joao Victor Portal <Joao.VictorPortal@windriver.com>
2024-03-15 19:50:57 -03:00
Ngairangbam Mili
cb90946bbb Fixing issues in include
Original review: https://review.opendev.org/c/starlingx/docs/+/906348

Change-Id: I3e6c58fe27db585992058cf9298b1e22afe72c65
Signed-off-by: Ngairangbam Mili <ngairangbam.mili@windriver.com>
2024-02-28 18:11:21 +00:00
Dinesh Neelapu
f72770e9fd OIDC system-local-ca CA certificate data retrieval incorrectly references ca.crt rather than tls.crt. (dsr8)
Since we used conditional texting, the stx docs remain unchanged.

Replaced ca.crt with tls.crt in one place.

Change-Id: I1bdb03e25744bf520111eaae20373170a8c1a59c
Signed-off-by: Dinesh Neelapu <dinesh.neelapu@windriver.com>
Signed-off-by: Ngairangbam Mili <ngairangbam.mili@windriver.com>
2024-02-26 12:41:52 +00:00
Zuul
1d18f0e3db Merge "Updated OIDC app docs" 2024-01-30 20:32:14 +00:00
Joao Victor Portal
daa431e385 Updated OIDC app docs
This commit does 2 changes in the OIDC app docs:

1) The docs were updated to be explicit about the OIDC app being
   compatible with LDAP servers and not only with the Windows Active
   Directory;
2) The page "Centralized OIDC Authentication Setup for Distributed
   Cloud" was renamed to "Centralized vs Distributed OIDC Authentication
   Setup" and was moved in the index of pages to be right below the
   first page "Overview of LDAP Servers". The idea is to use this page
   as a entry point for someone learning about the OIDC app, because
   every user must decide between a centralized and a distributed setup
   and because this page has links to all other pages except
   "Deprovision LDAP Server Authentication".

Story: 2010738
Task: 49455

Change-Id: I61c5b7f322ac8159b649c70eeaa0195d97ab12c7
Signed-off-by: Joao Victor Portal <Joao.VictorPortal@windriver.com>
2024-01-29 19:14:14 -03:00
Joao Victor Portal
90bd0e97cd Small fix to correct command rendering
The following characters may be changed when a text in a rst is rendered
outside a code block:

-- The escape is not rendered unless it is itself escaped;
-- Two consecutive "-" are replaced by a single longer dash;
-- The character "'" may be replaced by a slightly different character.

This causes error when a command is copied from a doc page to a command
terminal. To avoid these problems, extra escapes were added to some
lines in the rst.

Story: 2010738
Task: 49206

Change-Id: I4722b30f44cbd8cf99ce53d6135686a245e363c6
Signed-off-by: Joao Victor Portal <Joao.VictorPortal@windriver.com>
2024-01-24 12:59:38 -03:00
Joao Victor Portal
25d1e7b565 Add Local LDAP configuration to OIDC app doc
The OIDC app documentation was updated to show how to configure the
Local LDAP server. It is presented how to configure a WAD, a Local LDAP
server or both at same time.

There are also some minor fixes in the doc in this commit.

Story: 2010738
Task: 49206

Change-Id: Idcdba718559301273f0066f50d7326cc212ab5e9
Signed-off-by: Joao Victor Portal <Joao.VictorPortal@windriver.com>
2024-01-10 20:15:57 -03:00
Ron Stone
b7e75df19b Recommended "renewBefore" value for a certificate (r8, r7, r5, r5, dsR8, dsR7, dsR6, dsR5)
Add note as include
Add include where renewBefore is mentioned
Address patchset 1 review comments

Closes-Bug: 2042545

Change-Id: Iad4f58fd2cd4743605089b453ededce1e720c8e9
Signed-off-by: Ron Stone <ronald.stone@windriver.com>
2023-11-07 15:03:24 +00:00
Joao Victor Portal
0129f54537 Update Dex image and chart versions
Story: 2010703
Task: 48391

Signed-off-by: Joao Victor Portal <Joao.VictorPortal@windriver.com>
Change-Id: I6d29c71ec6c701a06f9ba47d21092c1b06ca22a2
2023-07-14 14:39:04 -03:00
Ron Stone
f125a8b892 Remove spurious escapes (r8,dsR8)
This change addresses a long-standing issue in rST documentation imported from XML.
That import process added backslash escapes in front of various characters. The three
most common being '(', ')', and '_'.
These instances are removed.

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: Id43a9337ffcd505ccbdf072d7b29afdb5d2c997e
2023-03-01 11:19:04 +00:00
Elaine Fonaro
cfed9ee0dc Add a note users to lock/unlock controller nodes after installing a ssl_ca
- Added a note for lock/unlock controler node.
- Added a reference for installing a root CA.

Closes-bug: 1995145

Signed-off-by: Elaine Fonaro <elaine.fonaro@windriver.com>
Change-Id: I293ecc19348308e60da7f5922d169c455b895576
2022-12-19 21:33:33 -03:00
Zuul
58b8df70eb Merge "Use control-plane label for nodeSelector and Tolerations" 2022-11-30 12:35:25 +00:00
Boovan Rajendran
a5a3205277 Use control-plane label for nodeSelector and Tolerations
Comments pertaining to the Stx 8.0 Release Notes in this Gerrit review
will be addressed by Juanita in this story.

Story: 2010441
Task: 46867

Upstream has deprecated 'node-role.kubernetes.io/master'
to use 'node-role.kubernetes.io/control-plane' in k8s 1.24.

Platform and applications need to be updated to use 'control-plane'
with nodeSelector/Tolerations so we may upgrade from 'master'.

This updates pod nodeSelector to use
'node-role.kubernetes.io/control-plane' instead of
'node-role.kubernetes.io/master'.

This updates pod Tolerations to support both:
- 'node-role.kubernetes.io/master'
- 'node-role.kubernetes.io/control-plane'

This commit updates the documentation examples to reflect the above specified changes.

This r8-0-release-notes-6a6ef57f4d99.rst topic has been created to only address updates in Line 745 to 747.

Story: 2010301
Task: 46670

Signed-off-by: Boovan Rajendran <boovan.rajendran@windriver.com>
Change-Id: I1722a025664c70f78a21fdc02fd7750935ef2bc4
2022-11-23 16:15:55 +00:00
Elisamara Aoki Goncalves
f57ff3fb99 Update oidc certificate yaml (r7,dsR7)
Closes-bug: 1994888

Signed-off-by: Elisamara Aoki Goncalves <elisamaraaoki.goncalves@windriver.com>
Change-Id: I5018c5acc34ef478c5b768830e0f7ccd5594581d
2022-10-26 16:02:13 -03:00
Ron Stone
4868e1c226 Spelling and typo fixes
Based on sphinx spellchecker testing/refinement.

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: Ibfe9b6d7bc8bf044a7fff0ac7e362e4067b17989
2022-08-16 16:19:27 -04:00
Elisamara Aoki Goncalves
b20a6233f2 Platform Application Components updates oidc-dex
Story: 2009838
Task: 45597

Signed-off-by: Elisamara Aoki Goncalves <elisamaraaoki.goncalves@windriver.com>
Change-Id: Ia3a0e3e5308221bc8ad1c66cdbb6b1a6046fc32b
2022-06-13 10:18:12 -03:00
Ron Stone
66aaeca8ab typos in OIDC AUTH DOCS for WRCP 21.12
Codeblock updates

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: I277f17ece1062adc9e7c3c6948c8c4745cdcba4e
2022-01-31 13:11:00 -05:00
Ron Stone
3e03a0bc82 Cert-Manager Use for StarlingX Platform Services
Initial draft procedures.
Resolve merge conflicts.
Incorporate patchset 1 review comments.
Incorporate patchset 2 review comments.
Incorporate patchset 3 review comments.
Incorporate patchset 4 review comments. Open questions for J. Sun to be addressed.
Incorporate patchset 5 review comments.
Made sample url used in overrides generic.
Incorporate patchset 8 review comments.
Added note about issuer_root_ca recommended by J. Sun.
Incorporate patchset 10 review comments.
Fix formatting issue in output.
Incorporate patchset 12 review comments.

Story: 2007361
Task: 42625

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: I5a73f902902acc02baccb92995f696a4b19fb773
2021-12-14 11:30:07 -05:00
Ron Stone
48b10b81e2 DEX github 404 error (pick)
Updated stale external link in Sec. doc.

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: If5d98e321b9d5a998d70a8bbe4a653102b9e1acf
2021-10-25 16:33:58 +00:00
egoncalv
cd607d6d64 Updated Security Guide
Added last Note, Step 5, and Step 6 to the file "configure-oidc-auth-applications" in the Security Guide

Patch 1: Acted on comments by Adil

Patch 2: Acted on comments by Greg and Jerry

Signed-off-by: egoncalv <elisamaraaoki.goncalves@windriver.com>
Change-Id: Iae92595a0da5cf7de3d95dd70448d306f9473aec
2021-05-07 09:09:53 -03:00
Rafael Jardim
d95c80d36f Update Security
Fixed merge conflict (RS)

Signed-off-by: Rafael Jardim <rafaeljordao.jardim@windriver.com>
Change-Id: I30b882a14196525f440db1108a56bbf862dfaf55
Signed-off-by: Ron Stone <ronald.stone@windriver.com>
2021-04-01 16:02:36 -04:00
Keane Lim
3c5fa979a4 Security guide update
Re-organized topic hierarchy

Tiny edit to restart review workflow.

Squashed with Resolved index.rst conflict commit

Change-Id: I13472792cb19d1e9975ac76c6954d38054d606c5
Signed-off-by: Keane Lim <keane.lim@windriver.com>
Signed-off-by: MCamp859 <maryx.camp@intel.com>
2021-03-12 15:10:40 -05:00