starlingx/docs
Code Issues Proposed changes
73e7f8ef4c
docs/doc/source/security/kubernetes
History
Oliver 73e7f8ef4c Security Planning shall support customer expectations 
Epic: Security Planning shall support expectations presented in pre-sales presentations.
Updated with review comments for Patch set 4
Updated with review comments for Patch set 3
Updated with review comments from Patch set 2
Updated with review comments from Patch set 1
Added summaries of items raised in pre-sales presentations

Change-Id: Ic1e458dfd57ad7ab18923f3a1756007ad717efe1
2022-06-23 14:09:03 -04:00
..
about-keystone-accounts.rst
Updated references in "Manage Keystone Accounts"
2021-10-22 21:42:22 +00:00
add-a-trusted-ca.rst
Note added in section Trusted CA certificate
2022-01-07 15:41:27 -03:00
alarm-expiring-soon-and-expired-certificates-baf5b8f73009.rst
Alarm Expiring or Expired Certificates
2021-11-26 11:09:14 -05:00
assign-pod-security-policies.rst
CephFS RWX Support in Host-based Ceph
2021-05-03 16:39:45 -04:00
auditd-support-339a51d8ce16.rst
Added auditd include File
2022-02-17 12:42:33 -05:00
authentication-of-software-delivery.rst
Update Security
2021-04-01 16:02:36 -04:00
centralized-oidc-authentication-setup-for-distributed-cloud.rst
Node Management and Distributed cloud Guide updates
2021-05-27 16:31:17 -03:00
cert-manager-post-installation-setup.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
configure-docker-registry-certificate-after-installation-c519edbfe90a.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
configure-horizon-user-lockout-on-failed-logins.rst
Service parameters deprecated and not being used by puppet manifests
2021-12-07 17:51:59 -03:00
configure-http-and-https-ports-for-horizon-using-the-cli.rst
Update Security
2021-04-01 16:02:36 -04:00
configure-kubectl-with-a-context-for-the-user.rst
Update Security
2021-04-01 16:02:36 -04:00
configure-kubernetes-for-oidc-token-validation-after-bootstrapping-the-system.rst
Update Security
2021-04-01 16:02:36 -04:00
configure-kubernetes-for-oidc-token-validation-while-bootstrapping-the-system.rst
Security guide update
2021-03-12 15:10:40 -05:00
configure-local-cli-access.rst
Inclusive Language Updates
2021-06-11 17:18:40 -03:00
configure-oidc-auth-applications.rst
typos in OIDC AUTH DOCS for WRCP 21.12
2022-01-31 13:11:00 -05:00
configure-remote-cli-access.rst
Added content related to Helm v3
2021-05-12 11:36:53 -03:00
configure-remote-helm-client-for-non-admin-users.rst
Configure Remote Helm v2 Client
2021-06-08 09:35:51 -03:00
configure-rest-api-applications-and-web-administration-server-certificates-after-installation-6816457ab95f.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
configure-the-keystone-token-expiration-time.rst
Security guide update
2021-03-12 15:10:40 -05:00
configure-users-groups-and-authorization.rst
Security guide update
2021-03-12 15:10:40 -05:00
configure-vault-using-the-cli.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
configure-vault.rst
Fix external link-404
2021-10-25 07:43:30 -04:00
connect-to-container-registries-through-a-firewall-or-proxy.rst
Security guide update
2021-03-12 15:10:40 -05:00
create-an-admin-type-service-account.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
create-certificates-locally-using-cert-manager-on-the-controller.rst
Security guide update
2021-03-12 15:10:40 -05:00
create-certificates-locally-using-openssl.rst
Security guide update
2021-03-12 15:10:40 -05:00
create-ldap-linux-accounts.rst
fix reference (pick)
2021-11-05 12:46:38 +00:00
dc-admin-endpoint-certificates-8fe7adf3f932.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
deprovision-windows-active-directory-authentication.rst
Update Security
2021-04-01 16:02:36 -04:00
disable-pod-security-policy-checking.rst
Update Security
2021-04-01 16:02:36 -04:00
enable-https-access-for-starlingx-rest-and-web-server-endpoints.rst
Replaced relase version to nn.nn
2021-06-14 20:16:28 -03:00
enable-pod-security-policy-checking.rst
Update Security
2021-04-01 16:02:36 -04:00
enable-public-use-of-the-cert-manager-acmesolver-image.rst
Added --reuse-values to the "system helm-override-update" command
2021-07-21 19:46:45 -04:00
enable-the-use-of-cert-manager-apis-by-an-arbitrary-user.rst
Security guide update
2021-03-12 15:10:40 -05:00
enable-use-of-cert-manager-acmesolver-image-in-a-particular-namespace.rst
Security guide update
2021-03-12 15:10:40 -05:00
encrypt-kubernetes-secret-data-at-rest.rst
Security guide update
2021-03-12 15:10:40 -05:00
estabilish-credentials-for-linux-user-accounts.rst
Update Security
2021-04-01 16:02:36 -04:00
establish-keystone-credentials-from-a-linux-account.rst
Update Security
2021-04-01 16:02:36 -04:00
etcd-certificates-c1fc943e4a9c.rst
Separate CA for etcd
2021-11-30 21:03:40 +00:00
firewall-port-overrides.rst
Security guide update
2021-03-12 15:10:40 -05:00
https-access-overview.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
index-security-kub-81153c1254c3.rst
Security Planning shall support customer expectations
2022-06-23 14:09:03 -04:00
install-portieris.rst
Update Security
2021-04-01 16:02:36 -04:00
install-the-kubernetes-dashboard.rst
Kub. dashboard port-update
2021-10-19 10:38:38 -04:00
install-update-the-starlingx-rest-and-web-server-certificate.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
install-vault.rst
Security guide update
2021-03-12 15:10:40 -05:00
keystone-account-authentication.rst
Security guide update
2021-03-12 15:10:40 -05:00
keystone-accounts.rst
Platform keystone password rule configuration
2021-11-23 10:28:19 -03:00
keystone-security-compliance-configuration-b149adca6a7f.rst
Platform keystone password rule configuration
2021-11-23 10:28:19 -03:00
kube-service-account.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
kubernetes-certificates-f4196d7cae9c.rst
Playbook to migrate platform certificates to use cert-manager for auto-renewals
2022-03-14 10:43:40 +00:00
kubernetes-cli-from-local-ldap-linux-account-login.rst
CephFS RWX Support in Host-based Ceph
2021-05-03 16:39:45 -04:00
kubernetes-root-ca-certificate-update-cloud-orchestration-a627f9d02d6d.rst
Added warning for K8 Root CA update impact on services
2022-01-10 17:24:01 -05:00
kubernetes-root-ca-certificate.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
local-ldap-linux-user-accounts.rst
CephFS RWX Support in Host-based Ceph
2021-05-03 16:39:45 -04:00
manage-keystone-accounts.rst
Updated references in "Manage Keystone Accounts"
2021-10-22 21:42:22 +00:00
manual-kubernetes-root-ca-certificate-update-8e9df2cd7fb9.rst
Added warning for K8 Root CA update impact on services
2022-01-10 17:24:01 -05:00
migrate-platform-certificates-to-use-cert-manager-c0b1727e4e5d.rst
Playbook to migrate platform certificates to use cert-manager for auto-renewals
2022-03-14 10:43:40 +00:00
obtain-the-authentication-token-using-the-browser.rst
Update Security
2021-04-01 16:02:36 -04:00
obtain-the-authentication-token-using-the-oidc-auth-shell-script.rst
OIDC script updates
2022-01-10 14:05:58 -05:00
oidc-client-dex-server-certificates-dc174462d51a.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
one-single-root-ca-multiple-server-client-certificates-0692df6ce16d.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
operator-command-logging.rst
Fixed \_ as the output was not rendering correctly (pick r5 updates only)
2021-11-02 11:27:15 -04:00
operator-login-authentication-logging.rst
Security guide update
2021-03-12 15:10:40 -05:00
overview-of-system-accounts.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
overview-of-uefi-secure-boot.rst
Security guide update
2021-03-12 15:10:40 -05:00
overview-of-windows-active-directory.rst
OIDC script updates
2022-01-10 14:05:58 -05:00
password-recovery-for-linux-user-accounts.rst
Security guide update
2021-03-12 15:10:40 -05:00
password-recovery.rst
Removed lock/unlock the controllers and subclouds after the keystone admin password change.
2021-11-25 16:07:21 +00:00
pod-security-policies.rst
pod security policies updates
2021-04-15 08:35:55 -04:00
portieris-clusterimagepolicy-and-imagepolicy-configuration.rst
Security guide update
2021-03-12 15:10:40 -05:00
portieris-overview.rst
Security guide update
2021-03-12 15:10:40 -05:00
portieris-server-certificate-a0c7054844bd.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
private-namespace-and-restricted-rbac.rst
Added --reuse-values to the "system helm-override-update" command
2021-07-21 19:46:45 -04:00
remote-access-for-linux-accounts.rst
Update Security
2021-04-01 16:02:36 -04:00
remote-access-index.rst
Added content related to Helm v3
2021-05-12 11:36:53 -03:00
remote-windows-active-directory-accounts.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
remove-portieris.rst
Remove instructions to delete secret resource
2021-10-18 12:46:37 +00:00
remove-vault.rst
Remove instructions to delete secret resource
2021-10-18 12:46:37 +00:00
resource-management.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-access-the-gui.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
security-cert-manager.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-configure-container-backed-remote-clis-and-clients.rst
Fix usertask images (pick)
2021-11-02 14:45:02 +00:00
security-default-firewall-rules.rst
Inclusive Language Updates
2021-06-11 17:18:40 -03:00
security-feature-configuration-for-spectre-and-meltdown.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-firewall-options.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
security-install-kubectl-and-helm-clients-directly-on-a-host.rst
Fixed \_ as the output was not rendering correctly (pick r5 updates only)
2021-11-02 11:27:15 -04:00
security-install-update-the-docker-registry-certificate-deprecated.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
security-rest-api-access.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-vault-overview.rst
Security guide update
2021-03-12 15:10:40 -05:00
starlingx-openstack-kubernetes-from-stsadmin-account-login.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
starlingx-rest-api-applications-and-the-web-admin-server-cert-9196c5794834.rst
Cluster issuer yaml configuration file reports unknown field "organizations" (pick r6)
2022-03-09 14:11:38 +00:00
starlingx-rest-api-applications-and-the-web-administration-server-deprecated.rst
Remove mentions to TPM mode on certificate commands
2022-04-27 11:21:44 -04:00
starlingx-system-accounts-system-account-password-rules.rst
System Account Password Rules
2021-05-14 13:42:24 -04:00
the-cert-manager-bootstrap-process.rst
Inclusive Language Updates
2021-06-11 17:18:40 -03:00
the-sysadmin-account.rst
Fixed Broken Link to the Installation Guides (pick stx5, stx 6, dsR6)
2022-03-21 18:13:28 +00:00
types-of-system-accounts.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
update-renew-kubernetes-certificates-52b00bd0bdae.rst
Updates on K8S Root CA Certificate managed by cert-manager
2021-12-13 01:33:32 -03:00
use-uefi-secure-boot.rst
Remove mentions to TPM mode on certificate commands
2022-04-27 11:21:44 -04:00
using-container-backed-remote-clis-and-clients.rst
Add a note for remotecli section when the https is enabled on the system
2021-12-06 07:08:10 -05:00
utility-script-to-display-certificates.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
vault-server-certificate-8573125eeea6.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00