starlingx/docs
Code Issues Proposed changes
cf98a7c9ea
docs/doc/source/security/kubernetes
History
Ron Stone cf98a7c9ea OIDC script updates 
Per Teresa H. OIDC CLI access script is part of image and does not need to
be downloaded.
Cleaned up explicit references to DS doenloads location and replaced with
placeholder.
Added note that oidc-auth script needs to be downloaded if used from remote
hosts
Patchset2 review updates

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: I9e713b9c41d8dbe4bad0fe0c2866c913853a79db
2022-01-10 14:05:58 -05:00
..
about-keystone-accounts.rst
Updated references in "Manage Keystone Accounts"
2021-10-22 21:42:22 +00:00
add-a-trusted-ca.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
alarm-expiring-soon-and-expired-certificates-baf5b8f73009.rst
Alarm Expiring or Expired Certificates
2021-11-26 11:09:14 -05:00
assign-pod-security-policies.rst
CephFS RWX Support in Host-based Ceph
2021-05-03 16:39:45 -04:00
auditd-support-339a51d8ce16.rst
Updated Controller Swact commands
2021-12-09 18:43:49 +00:00
authentication-of-software-delivery.rst
Update Security
2021-04-01 16:02:36 -04:00
centralized-oidc-authentication-setup-for-distributed-cloud.rst
Node Management and Distributed cloud Guide updates
2021-05-27 16:31:17 -03:00
cert-manager-post-installation-setup.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
configure-docker-registry-certificate-after-installation-c519edbfe90a.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
configure-horizon-user-lockout-on-failed-logins.rst
Service parameters deprecated and not being used by puppet manifests
2021-12-07 17:51:59 -03:00
configure-http-and-https-ports-for-horizon-using-the-cli.rst
Update Security
2021-04-01 16:02:36 -04:00
configure-kubectl-with-a-context-for-the-user.rst
Update Security
2021-04-01 16:02:36 -04:00
configure-kubernetes-for-oidc-token-validation-after-bootstrapping-the-system.rst
Update Security
2021-04-01 16:02:36 -04:00
configure-kubernetes-for-oidc-token-validation-while-bootstrapping-the-system.rst
Security guide update
2021-03-12 15:10:40 -05:00
configure-local-cli-access.rst
Inclusive Language Updates
2021-06-11 17:18:40 -03:00
configure-oidc-auth-applications.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
configure-remote-cli-access.rst
Added content related to Helm v3
2021-05-12 11:36:53 -03:00
configure-remote-helm-client-for-non-admin-users.rst
Configure Remote Helm v2 Client
2021-06-08 09:35:51 -03:00
configure-rest-api-applications-and-web-administration-server-certificates-after-installation-6816457ab95f.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
configure-the-keystone-token-expiration-time.rst
Security guide update
2021-03-12 15:10:40 -05:00
configure-users-groups-and-authorization.rst
Security guide update
2021-03-12 15:10:40 -05:00
configure-vault-using-the-cli.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
configure-vault.rst
Fix external link-404
2021-10-25 07:43:30 -04:00
connect-to-container-registries-through-a-firewall-or-proxy.rst
Security guide update
2021-03-12 15:10:40 -05:00
create-an-admin-type-service-account.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
create-certificates-locally-using-cert-manager-on-the-controller.rst
Security guide update
2021-03-12 15:10:40 -05:00
create-certificates-locally-using-openssl.rst
Security guide update
2021-03-12 15:10:40 -05:00
create-ldap-linux-accounts.rst
fix reference (pick)
2021-11-05 12:46:38 +00:00
dc-admin-endpoint-certificates-8fe7adf3f932.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
deprovision-windows-active-directory-authentication.rst
Update Security
2021-04-01 16:02:36 -04:00
disable-pod-security-policy-checking.rst
Update Security
2021-04-01 16:02:36 -04:00
enable-https-access-for-starlingx-rest-and-web-server-endpoints.rst
Replaced relase version to nn.nn
2021-06-14 20:16:28 -03:00
enable-pod-security-policy-checking.rst
Update Security
2021-04-01 16:02:36 -04:00
enable-public-use-of-the-cert-manager-acmesolver-image.rst
Added --reuse-values to the "system helm-override-update" command
2021-07-21 19:46:45 -04:00
enable-the-use-of-cert-manager-apis-by-an-arbitrary-user.rst
Security guide update
2021-03-12 15:10:40 -05:00
enable-use-of-cert-manager-acmesolver-image-in-a-particular-namespace.rst
Security guide update
2021-03-12 15:10:40 -05:00
encrypt-kubernetes-secret-data-at-rest.rst
Security guide update
2021-03-12 15:10:40 -05:00
estabilish-credentials-for-linux-user-accounts.rst
Update Security
2021-04-01 16:02:36 -04:00
establish-keystone-credentials-from-a-linux-account.rst
Update Security
2021-04-01 16:02:36 -04:00
etcd-certificates-c1fc943e4a9c.rst
Separate CA for etcd
2021-11-30 21:03:40 +00:00
firewall-port-overrides.rst
Security guide update
2021-03-12 15:10:40 -05:00
https-access-overview.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
index.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
install-portieris.rst
Update Security
2021-04-01 16:02:36 -04:00
install-the-kubernetes-dashboard.rst
Kub. dashboard port-update
2021-10-19 10:38:38 -04:00
install-update-the-starlingx-rest-and-web-server-certificate.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
install-vault.rst
Security guide update
2021-03-12 15:10:40 -05:00
isolate-starlingx-internal-cloud-management-network.rst
Update Security
2021-04-01 16:02:36 -04:00
keystone-account-authentication.rst
Security guide update
2021-03-12 15:10:40 -05:00
keystone-accounts.rst
Platform keystone password rule configuration
2021-11-23 10:28:19 -03:00
keystone-security-compliance-configuration-b149adca6a7f.rst
Platform keystone password rule configuration
2021-11-23 10:28:19 -03:00
kube-service-account.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
kubernetes-certificates-f4196d7cae9c.rst
Updates on K8S Root CA Certificate managed by cert-manager
2021-12-13 01:33:32 -03:00
kubernetes-cli-from-local-ldap-linux-account-login.rst
CephFS RWX Support in Host-based Ceph
2021-05-03 16:39:45 -04:00
kubernetes-root-ca-certificate-update-cloud-orchestration-a627f9d02d6d.rst
Updates on K8S Root CA Certificate managed by cert-manager
2021-12-13 01:33:32 -03:00
kubernetes-root-ca-certificate.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
local-and-ldap-linux-user-accounts.rst
Update Security
2021-04-01 16:02:36 -04:00
local-ldap-linux-user-accounts.rst
CephFS RWX Support in Host-based Ceph
2021-05-03 16:39:45 -04:00
local-linux-account-for-sysadmin.rst
Update Security
2021-04-01 16:02:36 -04:00
manage-keystone-accounts.rst
Updated references in "Manage Keystone Accounts"
2021-10-22 21:42:22 +00:00
manual-kubernetes-root-ca-certificate-update-8e9df2cd7fb9.rst
Updates on K8S Root CA Certificate managed by cert-manager
2021-12-13 01:33:32 -03:00
obtain-the-authentication-token-using-the-browser.rst
Update Security
2021-04-01 16:02:36 -04:00
obtain-the-authentication-token-using-the-oidc-auth-shell-script.rst
OIDC script updates
2022-01-10 14:05:58 -05:00
oidc-client-dex-server-certificates-dc174462d51a.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
one-single-root-ca-multiple-server-client-certificates-0692df6ce16d.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
operator-command-logging.rst
Fixed \_ as the output was not rendering correctly (pick r5 updates only)
2021-11-02 11:27:15 -04:00
operator-login-authentication-logging.rst
Security guide update
2021-03-12 15:10:40 -05:00
overview-of-system-accounts.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
overview-of-uefi-secure-boot.rst
Security guide update
2021-03-12 15:10:40 -05:00
overview-of-windows-active-directory.rst
OIDC script updates
2022-01-10 14:05:58 -05:00
password-recovery-for-linux-user-accounts.rst
Security guide update
2021-03-12 15:10:40 -05:00
password-recovery.rst
Removed lock/unlock the controllers and subclouds after the keystone admin password change.
2021-11-25 16:07:21 +00:00
pod-security-policies.rst
pod security policies updates
2021-04-15 08:35:55 -04:00
portieris-clusterimagepolicy-and-imagepolicy-configuration.rst
Security guide update
2021-03-12 15:10:40 -05:00
portieris-overview.rst
Security guide update
2021-03-12 15:10:40 -05:00
portieris-server-certificate-a0c7054844bd.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
private-namespace-and-restricted-rbac.rst
Added --reuse-values to the "system helm-override-update" command
2021-07-21 19:46:45 -04:00
remote-access-for-linux-accounts.rst
Update Security
2021-04-01 16:02:36 -04:00
remote-access-index.rst
Added content related to Helm v3
2021-05-12 11:36:53 -03:00
remote-windows-active-directory-accounts.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
remove-portieris.rst
Remove instructions to delete secret resource
2021-10-18 12:46:37 +00:00
remove-vault.rst
Remove instructions to delete secret resource
2021-10-18 12:46:37 +00:00
resource-management.rst
Security guide update
2021-03-12 15:10:40 -05:00
secure-https-external-connectivity.rst
Security guide update
2021-03-12 15:10:40 -05:00
secure-starlingx-rest-and-web-certificates-private-key-storage-with-tpm.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
security-access-the-gui.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
security-cert-manager.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-configure-container-backed-remote-clis-and-clients.rst
Fix usertask images (pick)
2021-11-02 14:45:02 +00:00
security-default-firewall-rules.rst
Inclusive Language Updates
2021-06-11 17:18:40 -03:00
security-feature-configuration-for-spectre-and-meltdown.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-firewall-options.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
security-hardening-firewall-options.rst
Update Security
2021-04-01 16:02:36 -04:00
security-hardening-intro.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-install-kubectl-and-helm-clients-directly-on-a-host.rst
Fixed \_ as the output was not rendering correctly (pick r5 updates only)
2021-11-02 11:27:15 -04:00
security-install-update-the-docker-registry-certificate-deprecated.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
security-rest-api-access.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-vault-overview.rst
Security guide update
2021-03-12 15:10:40 -05:00
ssh-and-console-login-timeout.rst
Security guide update
2021-03-12 15:10:40 -05:00
starlingx-accounts.rst
Security guide update
2021-03-12 15:10:40 -05:00
starlingx-openstack-kubernetes-from-stsadmin-account-login.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
starlingx-rest-api-applications-and-the-web-admin-server-cert-9196c5794834.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
starlingx-rest-api-applications-and-the-web-administration-server-deprecated.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
starlingx-system-accounts-system-account-password-rules.rst
System Account Password Rules
2021-05-14 13:42:24 -04:00
system-account-password-rules.rst
Security guide update
2021-03-12 15:10:40 -05:00
the-cert-manager-bootstrap-process.rst
Inclusive Language Updates
2021-06-11 17:18:40 -03:00
the-sysadmin-account.rst
Update Security
2021-04-01 16:02:36 -04:00
types-of-system-accounts.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
uefi-secure-boot.rst
Update Security
2021-04-01 16:02:36 -04:00
update-renew-kubernetes-certificates-52b00bd0bdae.rst
Updates on K8S Root CA Certificate managed by cert-manager
2021-12-13 01:33:32 -03:00
use-uefi-secure-boot.rst
Security guide update
2021-03-12 15:10:40 -05:00
using-container-backed-remote-clis-and-clients.rst
Add a note for remotecli section when the https is enabled on the system
2021-12-06 07:08:10 -05:00
utility-script-to-display-certificates.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
vault-server-certificate-8573125eeea6.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
web-administration-login-timeout.rst
Update Security
2021-04-01 16:02:36 -04:00