starlingx/docs
Code Issues Proposed changes
1e8067d7f9
docs/doc/source/security/kubernetes
History
Li Zhou 1e8067d7f9 Update secure boot doc about StarlingX Debian 
Add "Build considerations for signing packages for UEFI Secure Boot"
for Debian build, which has been different with Centos build.

Story: 2010643
Task: 47834

Change-Id: I0acbbfa52d8e78ed369ec8f2c9f37eed4dce6a41
Signed-off-by: Li Zhou <li.zhou@windriver.com>
2023-07-11 21:57:55 -04:00
..
about-keystone-accounts.rst
Updated references in "Manage Keystone Accounts"
2021-10-22 21:42:22 +00:00
add-a-trusted-ca.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
alarm-expiring-soon-and-expired-certificates-baf5b8f73009.rst
Implement alarm parsing
2022-11-18 11:34:27 -05:00
assign-pod-security-policies.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
auditd-support-339a51d8ce16.rst
Added auditd include File
2022-02-17 12:42:33 -05:00
authentication-of-software-delivery.rst
Update Security
2021-04-01 16:02:36 -04:00
centralized-oidc-authentication-setup-for-distributed-cloud.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
cert-manager-post-installation-setup.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
configure-docker-registry-certificate-after-installation-c519edbfe90a.rst
Required SAN parameter for local registry
2022-09-14 20:06:31 +00:00
configure-horizon-user-lockout-on-failed-logins.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-http-and-https-ports-for-horizon-using-the-cli.rst
Update Security
2021-04-01 16:02:36 -04:00
configure-kubectl-with-a-context-for-the-user.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-kubernetes-for-oidc-token-validation-after-bootstrapping-the-system.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-kubernetes-for-oidc-token-validation-while-bootstrapping-the-system.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-local-cli-access.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-oidc-auth-applications.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-remote-cli-access.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-remote-helm-client-for-non-admin-users.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-rest-api-applications-and-web-administration-server-certificates-after-installation-6816457ab95f.rst
Update cert-manager version to v1 from v1alpha2
2022-06-21 10:33:38 -03:00
configure-the-keystone-token-expiration-time.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-users-groups-and-authorization.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-vault-using-the-cli.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-vault.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
connect-to-container-registries-through-a-firewall-or-proxy.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
create-an-admin-type-service-account.rst
Update KubeVirt Windows VM
2022-12-21 07:19:46 -05:00
create-certificates-locally-using-cert-manager-on-the-controller.rst
Update cert-manager version to v1 from v1alpha2
2022-06-21 10:33:38 -03:00
create-certificates-locally-using-openssl.rst
Updated CN to "CN=registry.local" (r6, dsr6, r7, dsr7)
2022-11-22 21:11:29 +00:00
create-ldap-linux-accounts.rst
Playbook for managing local ldap admin user
2022-06-06 17:29:42 -03:00
cve-maintenance-723cd9dd54b3.rst
CVSS v3 Adoption for OS
2022-12-18 00:06:52 -05:00
dc-admin-endpoint-certificates-8fe7adf3f932.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
deprovision-windows-active-directory-authentication.rst
Updated OIDC service parameter names
2022-11-18 16:02:05 -03:00
disable-pod-security-policy-checking.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
enable-https-access-for-starlingx-rest-and-web-server-endpoints.rst
Replaced relase version to nn.nn
2021-06-14 20:16:28 -03:00
enable-pod-security-policy-checking.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
enable-public-use-of-the-cert-manager-acmesolver-image.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
enable-the-use-of-cert-manager-apis-by-an-arbitrary-user.rst
Security guide update
2021-03-12 15:10:40 -05:00
enable-use-of-cert-manager-acmesolver-image-in-a-particular-namespace.rst
Replace container tags
2023-01-30 10:19:18 -05:00
encrypt-kubernetes-secret-data-at-rest.rst
Security guide update
2021-03-12 15:10:40 -05:00
estabilish-credentials-for-linux-user-accounts.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
establish-keystone-credentials-from-a-linux-account.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
etcd-certificates-c1fc943e4a9c.rst
Spelling and typo fixes
2022-08-16 16:19:27 -04:00
firewall-port-overrides.rst
Security guide update
2021-03-12 15:10:40 -05:00
https-access-overview.rst
Create OpenLDAP certificate on bootstrap
2022-11-07 12:06:53 -03:00
index-security-kub-81153c1254c3.rst
Merge "CVSS v3 Adoption for OS"
2022-12-20 16:16:45 +00:00
install-portieris.rst
Update Security
2021-04-01 16:02:36 -04:00
install-the-kubernetes-dashboard.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
install-update-the-starlingx-rest-and-web-server-certificate.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
install-vault.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
keystone-account-authentication.rst
Security guide update
2021-03-12 15:10:40 -05:00
keystone-account-roles-64098d1abdc1.rst
Support for reader role: creation of a new doc
2022-12-09 10:17:32 -03:00
keystone-accounts.rst
Support for reader role: creation of a new doc
2022-12-09 10:17:32 -03:00
keystone-security-compliance-configuration-b149adca6a7f.rst
Platform keystone password rule configuration
2021-11-23 10:28:19 -03:00
kube-service-account.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
kubernetes-certificates-f4196d7cae9c.rst
Playbook to migrate platform certificates to use cert-manager for auto-renewals
2022-03-14 10:43:40 +00:00
kubernetes-cli-from-local-ldap-linux-account-login.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
kubernetes-operator-command-logging-663fce5d74e7.rst
Security Audit Logging of K8S API
2022-06-23 10:35:27 -03:00
kubernetes-root-ca-certificate-update-cloud-orchestration-a627f9d02d6d.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
kubernetes-root-ca-certificate.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
local-ldap-linux-user-accounts.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
manage-keystone-accounts.rst
Updated references in "Manage Keystone Accounts"
2021-10-22 21:42:22 +00:00
manage-local-ldap-39fe3a85a528.rst
Update LDAP playbook doc
2022-09-20 10:26:53 -03:00
manual-kubernetes-root-ca-certificate-update-8e9df2cd7fb9.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
migrate-platform-certificates-to-use-cert-manager-c0b1727e4e5d.rst
Merge "High Security Vulnerability Document Updates (r6, r6ds, r7, r7ds)"
2022-12-20 15:07:28 +00:00
obtain-the-authentication-token-using-the-browser.rst
Update Security
2021-04-01 16:02:36 -04:00
obtain-the-authentication-token-using-the-oidc-auth-shell-script.rst
OIDC script updates
2022-01-10 14:05:58 -05:00
oidc-client-dex-server-certificates-dc174462d51a.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
one-single-root-ca-multiple-server-client-certificates-0692df6ce16d.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
operator-command-logging.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
operator-login-authentication-logging.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
overview-of-system-accounts.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
overview-of-uefi-secure-boot.rst
Security guide update
2021-03-12 15:10:40 -05:00
overview-of-windows-active-directory.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
password-recovery-for-linux-user-accounts.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
password-recovery.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
pod-security-admission-controller-8e9e6994100f.rst
Update Pod Security Admission Controller for k8s 1.24
2022-12-07 18:05:50 -03:00
pod-security-policies.rst
Support for Pod Security Admission Controller - Tech Preview
2022-06-27 23:16:41 -03:00
portieris-clusterimagepolicy-and-imagepolicy-configuration.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
portieris-overview.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
portieris-server-certificate-a0c7054844bd.rst
Portieris Server Certificate Renewal Policy (r6,dsR6)
2022-08-31 20:09:43 +00:00
private-namespace-and-restricted-rbac.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
remote-access-for-linux-accounts.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
remote-access-index.rst
Added content related to Helm v3
2021-05-12 11:36:53 -03:00
remote-windows-active-directory-accounts.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
remove-portieris.rst
Remove instructions to delete secret resource
2021-10-18 12:46:37 +00:00
remove-vault.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
resource-management.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-access-the-gui.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
security-cert-manager.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-configure-container-backed-remote-clis-and-clients.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-default-firewall-rules.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-feature-configuration-for-spectre-and-meltdown.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-firewall-options.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-install-kubectl-and-helm-clients-directly-on-a-host.rst
KubeVirt/CDI introduction
2022-12-16 19:32:48 -05:00
security-install-update-the-docker-registry-certificate-deprecated.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-rest-api-access.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-vault-overview.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
sssd-support-5fb6c4b0320b.rst
SSH integration with remote WAD
2022-12-19 12:55:56 -03:00
starlingx-openstack-kubernetes-from-stsadmin-account-login.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
starlingx-rest-api-applications-and-the-web-admin-server-cert-9196c5794834.rst
Fix errors in the proc. to config. HTTPS and use remote CLI with it
2023-01-25 21:00:49 +00:00
starlingx-rest-api-applications-and-the-web-administration-server-deprecated.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
starlingx-system-accounts-system-account-password-rules.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
the-cert-manager-bootstrap-process.rst
Platform Application Components updates ingress-nginx
2022-06-23 09:41:59 -03:00
the-sysadmin-account.rst
Generic CentOS > Debian updates
2022-12-15 21:14:05 +00:00
types-of-system-accounts.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
update-renew-kubernetes-certificates-52b00bd0bdae.rst
Updates on K8S Root CA Certificate managed by cert-manager
2021-12-13 01:33:32 -03:00
use-uefi-secure-boot.rst
Update secure boot doc about StarlingX Debian
2023-07-11 21:57:55 -04:00
using-container-backed-remote-clis-and-clients.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
utility-script-to-display-certificates.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
vault-server-certificate-8573125eeea6.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00