starlingx/docs
Code Issues Proposed changes
cb0245cfab
docs/doc/source/security/kubernetes
History
Juanita Balaraj cb0245cfab Added RSA Key length (dsr8) 
Modified the note to include <the certificate file>
Removed trailing spaces and fixed Patchset 7 comments
Updated Patchset 6 comments and removed the word platform
Fixed formatting issues
Updated Patchset 4 comments
Added additional notes in multiple topics listed in the review
Updated the Security / Upgrade Guide with a note
Change-Id: If0a88e88268b2a4540b6abf97bc7b5ca9049747c
Signed-off-by: Juanita Balaraj <juanita.balaraj@windriver.com>

Change-Id: I5686cda10f4ac9b184f5ac1e6ceec003b09155d2
2023-06-28 04:44:19 +00:00
..
figures
Changes for OS Level Access Controls with AppArmor (dsR8)
2023-05-02 15:20:45 -03:00
about-apparmor-ebdab8f1ed87.rst
AppArmor Support (dsR8)
2023-04-25 15:53:17 -03:00
about-keystone-accounts.rst
Updated references in "Manage Keystone Accounts"
2021-10-22 21:42:22 +00:00
add-a-trusted-ca.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
alarm-expiring-soon-and-expired-certificates-baf5b8f73009.rst
Implement alarm parsing
2022-11-18 11:34:27 -05:00
apply-a-profile-to-a-pod-c2fa4d958dec.rst
AppArmor Support (dsR8)
2023-04-25 15:53:17 -03:00
assign-pod-security-policies.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
auditd-support-339a51d8ce16.rst
Added auditd include File
2022-02-17 12:42:33 -05:00
authentication-of-software-delivery.rst
Update Security
2021-04-01 16:02:36 -04:00
author-apparmor-profiles-b02de0a22771.rst
AppArmor Support (dsR8)
2023-04-25 15:53:17 -03:00
centralized-oidc-authentication-setup-for-distributed-cloud.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
cert-manager-post-installation-setup.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
configure-docker-registry-certificate-after-installation-c519edbfe90a.rst
Required SAN parameter for local registry
2022-09-14 20:06:31 +00:00
configure-horizon-user-lockout-on-failed-logins.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-http-and-https-ports-for-horizon-using-the-cli.rst
Update Security
2021-04-01 16:02:36 -04:00
configure-kubectl-with-a-context-for-the-user.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-kubernetes-for-oidc-token-validation-after-bootstrapping-the-system.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-kubernetes-for-oidc-token-validation-while-bootstrapping-the-system.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-local-cli-access.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-oidc-auth-applications.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-remote-cli-access.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-remote-helm-client-for-non-admin-users.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-rest-api-applications-and-web-administration-server-certificates-after-installation-6816457ab95f.rst
Update cert-manager version to v1 from v1alpha2
2022-06-21 10:33:38 -03:00
configure-the-keystone-token-expiration-time.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-users-groups-and-authorization.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-vault-using-the-cli.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
configure-vault.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
connect-to-container-registries-through-a-firewall-or-proxy.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
create-an-admin-type-service-account.rst
Update KubeVirt Windows VM
2022-12-21 07:19:46 -05:00
create-certificates-locally-using-cert-manager-on-the-controller.rst
Update cert-manager version to v1 from v1alpha2
2022-06-21 10:33:38 -03:00
create-certificates-locally-using-openssl.rst
Added RSA Key length (dsr8)
2023-06-28 04:44:19 +00:00
create-ldap-linux-accounts.rst
Playbook for managing local ldap admin user
2022-06-06 17:29:42 -03:00
cve-maintenance-723cd9dd54b3.rst
CVSS v3 Adoption for OS
2022-12-18 00:06:52 -05:00
dc-admin-endpoint-certificates-8fe7adf3f932.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
deprovision-windows-active-directory-authentication.rst
Updated OIDC service parameter names
2022-11-18 16:02:05 -03:00
disable-pod-security-policy-checking.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
enable-apparmor-log-bb600560d794.rst
AppArmor Support (dsR8)
2023-04-25 15:53:17 -03:00
enable-disable-apparmor-on-a-host-63a7a184d310.rst
AppArmor Support (dsR8)
2023-04-25 15:53:17 -03:00
enable-disable-apparmor-on-a-host-using-horizon-a318ab726396.rst
Changes for OS Level Access Controls with AppArmor (dsR8)
2023-05-02 15:20:45 -03:00
enable-https-access-for-starlingx-rest-and-web-server-endpoints.rst
Replaced relase version to nn.nn
2021-06-14 20:16:28 -03:00
enable-pod-security-policy-checking.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
enable-public-use-of-the-cert-manager-acmesolver-image.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
enable-the-use-of-cert-manager-apis-by-an-arbitrary-user.rst
Security guide update
2021-03-12 15:10:40 -05:00
enable-use-of-cert-manager-acmesolver-image-in-a-particular-namespace.rst
Replace container tags
2023-01-30 10:19:18 -05:00
encrypt-kubernetes-secret-data-at-rest.rst
Security guide update
2021-03-12 15:10:40 -05:00
estabilish-credentials-for-linux-user-accounts.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
establish-keystone-credentials-from-a-linux-account.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
etcd-certificates-c1fc943e4a9c.rst
Spelling and typo fixes
2022-08-16 16:19:27 -04:00
firewall-port-overrides.rst
Security guide update
2021-03-12 15:10:40 -05:00
https-access-overview.rst
Added RSA Key length (dsr8)
2023-06-28 04:44:19 +00:00
index-security-kub-81153c1254c3.rst
Changes for OS Level Access Controls with AppArmor (dsR8)
2023-05-02 15:20:45 -03:00
install-portieris.rst
Platform Application Components Up-version - Portieris (dsR8)
2023-05-05 11:10:41 -03:00
install-security-profiles-operator-1b2f9a0f0108.rst
AppArmor Support (dsR8)
2023-04-25 15:53:17 -03:00
install-the-kubernetes-dashboard.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
install-update-the-starlingx-rest-and-web-server-certificate.rst
Added RSA Key length (dsr8)
2023-06-28 04:44:19 +00:00
install-vault.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
keystone-account-authentication.rst
Security guide update
2021-03-12 15:10:40 -05:00
keystone-account-roles-64098d1abdc1.rst
Support for reader role: creation of a new doc
2022-12-09 10:17:32 -03:00
keystone-accounts.rst
Support for reader role: creation of a new doc
2022-12-09 10:17:32 -03:00
keystone-security-compliance-configuration-b149adca6a7f.rst
Platform keystone password rule configuration
2021-11-23 10:28:19 -03:00
kube-service-account.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
kubernetes-certificates-f4196d7cae9c.rst
Front-proxy-client and front-proxy-ca certificates are not documented (r8,dsR8)
2023-05-17 17:29:33 -03:00
kubernetes-cli-from-local-ldap-linux-account-login.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
kubernetes-operator-command-logging-663fce5d74e7.rst
Security Audit Logging of K8S API
2022-06-23 10:35:27 -03:00
kubernetes-root-ca-certificate-update-cloud-orchestration-a627f9d02d6d.rst
Added RSA Key length (dsr8)
2023-06-28 04:44:19 +00:00
kubernetes-root-ca-certificate.rst
Added RSA Key length (dsr8)
2023-06-28 04:44:19 +00:00
local-ldap-linux-user-accounts.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
manage-keystone-accounts.rst
Updated references in "Manage Keystone Accounts"
2021-10-22 21:42:22 +00:00
manage-local-ldap-39fe3a85a528.rst
Update LDAP playbook doc
2022-09-20 10:26:53 -03:00
manual-kubernetes-root-ca-certificate-update-8e9df2cd7fb9.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
migrate-platform-certificates-to-use-cert-manager-c0b1727e4e5d.rst
Added RSA Key length (dsr8)
2023-06-28 04:44:19 +00:00
obtain-the-authentication-token-using-the-browser.rst
Update Security
2021-04-01 16:02:36 -04:00
obtain-the-authentication-token-using-the-oidc-auth-shell-script.rst
OIDC script updates
2022-01-10 14:05:58 -05:00
oidc-client-dex-server-certificates-dc174462d51a.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
one-single-root-ca-multiple-server-client-certificates-0692df6ce16d.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
operator-command-logging.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
operator-login-authentication-logging.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
overview-of-system-accounts.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
overview-of-uefi-secure-boot.rst
Security guide update
2021-03-12 15:10:40 -05:00
overview-of-windows-active-directory.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
password-recovery-for-linux-user-accounts.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
password-recovery.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
pod-security-admission-controller-8e9e6994100f.rst
Update Pod Security Admission Controller for k8s 1.24
2022-12-07 18:05:50 -03:00
pod-security-policies.rst
Support for Pod Security Admission Controller - Tech Preview
2022-06-27 23:16:41 -03:00
portieris-clusterimagepolicy-and-imagepolicy-configuration.rst
Platform Application Components Up-version - Portieris (dsR8)
2023-05-05 11:10:41 -03:00
portieris-overview.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
portieris-server-certificate-a0c7054844bd.rst
Portieris Server Certificate Renewal Policy (r6,dsR6)
2022-08-31 20:09:43 +00:00
private-namespace-and-restricted-rbac.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
profile-management-a8df19c86a5d.rst
AppArmor Support (dsR8)
2023-04-25 15:53:17 -03:00
remote-access-for-linux-accounts.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
remote-access-index.rst
Added content related to Helm v3
2021-05-12 11:36:53 -03:00
remote-windows-active-directory-accounts.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
remove-portieris.rst
Platform Application Components Up-version - Portieris (dsR8)
2023-05-05 11:10:41 -03:00
remove-vault.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
resource-management.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-access-the-gui.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
security-cert-manager.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-configure-container-backed-remote-clis-and-clients.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-default-firewall-rules.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-feature-configuration-for-spectre-and-meltdown.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-firewall-options.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
security-install-kubectl-and-helm-clients-directly-on-a-host.rst
KubeVirt/CDI introduction
2022-12-16 19:32:48 -05:00
security-install-update-the-docker-registry-certificate-deprecated.rst
Added RSA Key length (dsr8)
2023-06-28 04:44:19 +00:00
security-rest-api-access.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-vault-overview.rst
Merge "Vault updates (r8,dsR8)"
2023-04-19 20:31:06 +00:00
sssd-support-5fb6c4b0320b.rst
SSH integration with remote WAD
2022-12-19 12:55:56 -03:00
starlingx-openstack-kubernetes-from-stsadmin-account-login.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
starlingx-rest-api-applications-and-the-web-admin-server-cert-9196c5794834.rst
Added RSA Key length (dsr8)
2023-06-28 04:44:19 +00:00
starlingx-rest-api-applications-and-the-web-administration-server-deprecated.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
starlingx-system-accounts-system-account-password-rules.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
the-cert-manager-bootstrap-process.rst
Platform Application Components updates ingress-nginx
2022-06-23 09:41:59 -03:00
the-sysadmin-account.rst
Generic CentOS > Debian updates
2022-12-15 21:14:05 +00:00
types-of-system-accounts.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
update-renew-kubernetes-certificates-52b00bd0bdae.rst
Updates on K8S Root CA Certificate managed by cert-manager
2021-12-13 01:33:32 -03:00
use-uefi-secure-boot.rst
Extract Secure Boot Cert from ISO (dsR8,dsR7,dsR6,r5)
2023-06-07 17:15:49 +00:00
using-container-backed-remote-clis-and-clients.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00
utility-script-to-display-certificates.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
vault-server-certificate-8573125eeea6.rst
Remove spurious escapes (r8,dsR8)
2023-03-01 11:19:04 +00:00