starlingx/docs
Code Issues Proposed changes
docs/doc/source/security/kubernetes
History
Elisamara Aoki Goncalves 0d17a1d482 SSH integration with remote WAD 
Create section SSSD Support
Add SSSD to abbrev list
Fix commands
Add back line 45 to 47
Fix typos
Change section name and index
Reword and remove unnecessary sub-sections
Add examples
Remove duplicated SSSD
Add note

Story: 2009834
Task: 46547

Signed-off-by: Elisamara Aoki Goncalves <elisamaraaoki.goncalves@windriver.com>
Change-Id: Ibf891aa076319c78e2e19e862d2601047312f174
2022-12-19 12:55:56 -03:00
..
about-keystone-accounts.rst
Updated references in "Manage Keystone Accounts"
2021-10-22 21:42:22 +00:00
add-a-trusted-ca.rst
Spelling and typo fixes
2022-08-16 16:19:27 -04:00
alarm-expiring-soon-and-expired-certificates-baf5b8f73009.rst
Implement alarm parsing
2022-11-18 11:34:27 -05:00
assign-pod-security-policies.rst
CephFS RWX Support in Host-based Ceph
2021-05-03 16:39:45 -04:00
auditd-support-339a51d8ce16.rst
Added auditd include File
2022-02-17 12:42:33 -05:00
authentication-of-software-delivery.rst
Update Security
2021-04-01 16:02:36 -04:00
centralized-oidc-authentication-setup-for-distributed-cloud.rst
Updated OIDC service parameter names
2022-11-18 16:02:05 -03:00
cert-manager-post-installation-setup.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
configure-docker-registry-certificate-after-installation-c519edbfe90a.rst
Required SAN parameter for local registry
2022-09-14 20:06:31 +00:00
configure-horizon-user-lockout-on-failed-logins.rst
Service parameters deprecated and not being used by puppet manifests
2021-12-07 17:51:59 -03:00
configure-http-and-https-ports-for-horizon-using-the-cli.rst
Update Security
2021-04-01 16:02:36 -04:00
configure-kubectl-with-a-context-for-the-user.rst
Update Security
2021-04-01 16:02:36 -04:00
configure-kubernetes-for-oidc-token-validation-after-bootstrapping-the-system.rst
Updated OIDC service parameter names
2022-11-18 16:02:05 -03:00
configure-kubernetes-for-oidc-token-validation-while-bootstrapping-the-system.rst
Security guide update
2021-03-12 15:10:40 -05:00
configure-local-cli-access.rst
Inclusive Language Updates
2021-06-11 17:18:40 -03:00
configure-oidc-auth-applications.rst
Merge "Use control-plane label for nodeSelector and Tolerations"
2022-11-30 12:35:25 +00:00
configure-remote-cli-access.rst
Added content related to Helm v3
2021-05-12 11:36:53 -03:00
configure-remote-helm-client-for-non-admin-users.rst
Configure Remote Helm v2 Client
2021-06-08 09:35:51 -03:00
configure-rest-api-applications-and-web-administration-server-certificates-after-installation-6816457ab95f.rst
Update cert-manager version to v1 from v1alpha2
2022-06-21 10:33:38 -03:00
configure-the-keystone-token-expiration-time.rst
Security guide update
2021-03-12 15:10:40 -05:00
configure-users-groups-and-authorization.rst
Security guide update
2021-03-12 15:10:40 -05:00
configure-vault-using-the-cli.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
configure-vault.rst
Fix external link-404
2021-10-25 07:43:30 -04:00
connect-to-container-registries-through-a-firewall-or-proxy.rst
Security guide update
2021-03-12 15:10:40 -05:00
create-an-admin-type-service-account.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
create-certificates-locally-using-cert-manager-on-the-controller.rst
Update cert-manager version to v1 from v1alpha2
2022-06-21 10:33:38 -03:00
create-certificates-locally-using-openssl.rst
Updated CN to "CN=registry.local" (r6, dsr6, r7, dsr7)
2022-11-22 21:11:29 +00:00
create-ldap-linux-accounts.rst
Playbook for managing local ldap admin user
2022-06-06 17:29:42 -03:00
dc-admin-endpoint-certificates-8fe7adf3f932.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
deprovision-windows-active-directory-authentication.rst
Updated OIDC service parameter names
2022-11-18 16:02:05 -03:00
disable-pod-security-policy-checking.rst
Update Security
2021-04-01 16:02:36 -04:00
enable-https-access-for-starlingx-rest-and-web-server-endpoints.rst
Replaced relase version to nn.nn
2021-06-14 20:16:28 -03:00
enable-pod-security-policy-checking.rst
Update Security
2021-04-01 16:02:36 -04:00
enable-public-use-of-the-cert-manager-acmesolver-image.rst
Added --reuse-values to the "system helm-override-update" command
2021-07-21 19:46:45 -04:00
enable-the-use-of-cert-manager-apis-by-an-arbitrary-user.rst
Security guide update
2021-03-12 15:10:40 -05:00
enable-use-of-cert-manager-acmesolver-image-in-a-particular-namespace.rst
Security guide update
2021-03-12 15:10:40 -05:00
encrypt-kubernetes-secret-data-at-rest.rst
Security guide update
2021-03-12 15:10:40 -05:00
estabilish-credentials-for-linux-user-accounts.rst
Update Security
2021-04-01 16:02:36 -04:00
establish-keystone-credentials-from-a-linux-account.rst
Update Security
2021-04-01 16:02:36 -04:00
etcd-certificates-c1fc943e4a9c.rst
Spelling and typo fixes
2022-08-16 16:19:27 -04:00
firewall-port-overrides.rst
Security guide update
2021-03-12 15:10:40 -05:00
https-access-overview.rst
Certificates expiration date information
2022-06-23 09:55:16 -03:00
index-security-kub-81153c1254c3.rst
SSH integration with remote WAD
2022-12-19 12:55:56 -03:00
install-portieris.rst
Update Security
2021-04-01 16:02:36 -04:00
install-the-kubernetes-dashboard.rst
Kub. dashboard port-update
2021-10-19 10:38:38 -04:00
install-update-the-starlingx-rest-and-web-server-certificate.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
install-vault.rst
Armada Deprecation and Replacement
2022-06-29 10:40:56 -04:00
keystone-account-authentication.rst
Security guide update
2021-03-12 15:10:40 -05:00
keystone-account-roles-64098d1abdc1.rst
Support for reader role: creation of a new doc
2022-12-09 10:17:32 -03:00
keystone-accounts.rst
Support for reader role: creation of a new doc
2022-12-09 10:17:32 -03:00
keystone-security-compliance-configuration-b149adca6a7f.rst
Platform keystone password rule configuration
2021-11-23 10:28:19 -03:00
kube-service-account.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
kubernetes-certificates-f4196d7cae9c.rst
Playbook to migrate platform certificates to use cert-manager for auto-renewals
2022-03-14 10:43:40 +00:00
kubernetes-cli-from-local-ldap-linux-account-login.rst
CephFS RWX Support in Host-based Ceph
2021-05-03 16:39:45 -04:00
kubernetes-operator-command-logging-663fce5d74e7.rst
Security Audit Logging of K8S API
2022-06-23 10:35:27 -03:00
kubernetes-root-ca-certificate-update-cloud-orchestration-a627f9d02d6d.rst
Spelling and typo fixes
2022-08-16 16:19:27 -04:00
kubernetes-root-ca-certificate.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
local-ldap-linux-user-accounts.rst
Spelling and typo fixes
2022-08-16 16:19:27 -04:00
manage-keystone-accounts.rst
Updated references in "Manage Keystone Accounts"
2021-10-22 21:42:22 +00:00
manage-local-ldap-39fe3a85a528.rst
Update LDAP playbook doc
2022-09-20 10:26:53 -03:00
manual-kubernetes-root-ca-certificate-update-8e9df2cd7fb9.rst
Spelling and typo fixes
2022-08-16 16:19:27 -04:00
migrate-platform-certificates-to-use-cert-manager-c0b1727e4e5d.rst
Playbook to migrate platform certificates to use cert-manager for auto-renewals
2022-03-14 10:43:40 +00:00
obtain-the-authentication-token-using-the-browser.rst
Update Security
2021-04-01 16:02:36 -04:00
obtain-the-authentication-token-using-the-oidc-auth-shell-script.rst
OIDC script updates
2022-01-10 14:05:58 -05:00
oidc-client-dex-server-certificates-dc174462d51a.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
one-single-root-ca-multiple-server-client-certificates-0692df6ce16d.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
operator-command-logging.rst
Merge "Security Audit Logging of K8S API"
2022-06-28 17:33:35 +00:00
operator-login-authentication-logging.rst
Security Audit Logging
2022-05-03 07:34:25 -04:00
overview-of-system-accounts.rst
Playbook for managing local ldap admin user
2022-06-06 17:29:42 -03:00
overview-of-uefi-secure-boot.rst
Security guide update
2021-03-12 15:10:40 -05:00
overview-of-windows-active-directory.rst
OIDC script updates
2022-01-10 14:05:58 -05:00
password-recovery-for-linux-user-accounts.rst
Password command usage is incorrect. (CP r6, dsr6)
2022-06-03 09:45:59 -03:00
password-recovery.rst
Removed lock/unlock the controllers and subclouds after the keystone admin password change.
2021-11-25 16:07:21 +00:00
pod-security-admission-controller-8e9e6994100f.rst
Update Pod Security Admission Controller for k8s 1.24
2022-12-07 18:05:50 -03:00
pod-security-policies.rst
Support for Pod Security Admission Controller - Tech Preview
2022-06-27 23:16:41 -03:00
portieris-clusterimagepolicy-and-imagepolicy-configuration.rst
Security guide update
2021-03-12 15:10:40 -05:00
portieris-overview.rst
Added a Warning Note for the Portieris application
2022-06-21 18:21:15 -04:00
portieris-server-certificate-a0c7054844bd.rst
Portieris Server Certificate Renewal Policy (r6,dsR6)
2022-08-31 20:09:43 +00:00
private-namespace-and-restricted-rbac.rst
Revert "Manual ceph-pool-kube-rbd secrect creation step removed (r6,r7,dsR6,dsR7)"
2022-11-24 16:29:13 +00:00
remote-access-for-linux-accounts.rst
Update Security
2021-04-01 16:02:36 -04:00
remote-access-index.rst
Added content related to Helm v3
2021-05-12 11:36:53 -03:00
remote-windows-active-directory-accounts.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
remove-portieris.rst
Remove instructions to delete secret resource
2021-10-18 12:46:37 +00:00
remove-vault.rst
Armada Deprecation and Replacement
2022-06-29 10:40:56 -04:00
resource-management.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-access-the-gui.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
security-cert-manager.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-configure-container-backed-remote-clis-and-clients.rst
Updated commands in "Configure Container-backed Remote CLIs and Clients"
2022-12-14 19:43:26 -05:00
security-default-firewall-rules.rst
Inclusive Language Updates
2021-06-11 17:18:40 -03:00
security-feature-configuration-for-spectre-and-meltdown.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-firewall-options.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
security-install-kubectl-and-helm-clients-directly-on-a-host.rst
Fixed \_ as the output was not rendering correctly (pick r5 updates only)
2021-11-02 11:27:15 -04:00
security-install-update-the-docker-registry-certificate-deprecated.rst
Cert-Manager Use for StarlingX Platform Services
2021-12-14 11:30:07 -05:00
security-rest-api-access.rst
Security guide update
2021-03-12 15:10:40 -05:00
security-vault-overview.rst
Security guide update
2021-03-12 15:10:40 -05:00
sssd-support-5fb6c4b0320b.rst
SSH integration with remote WAD
2022-12-19 12:55:56 -03:00
starlingx-openstack-kubernetes-from-stsadmin-account-login.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
starlingx-rest-api-applications-and-the-web-admin-server-cert-9196c5794834.rst
Platform Application Components updates oidc-dex
2022-06-13 10:18:12 -03:00
starlingx-rest-api-applications-and-the-web-administration-server-deprecated.rst
Remove mentions to TPM mode on certificate commands
2022-04-27 11:21:44 -04:00
starlingx-system-accounts-system-account-password-rules.rst
System Account Password Rules
2021-05-14 13:42:24 -04:00
the-cert-manager-bootstrap-process.rst
Platform Application Components updates ingress-nginx
2022-06-23 09:41:59 -03:00
the-sysadmin-account.rst
Spelling and typo fixes
2022-08-16 16:19:27 -04:00
types-of-system-accounts.rst
Editorial updates on Security Guide upstream
2021-06-02 12:28:10 -03:00
update-renew-kubernetes-certificates-52b00bd0bdae.rst
Updates on K8S Root CA Certificate managed by cert-manager
2021-12-13 01:33:32 -03:00
use-uefi-secure-boot.rst
Incorrect public key for signed starlingX 5.0 iso (r6)
2022-08-05 15:58:15 -03:00
using-container-backed-remote-clis-and-clients.rst
Add a note for remotecli section when the https is enabled on the system
2021-12-06 07:08:10 -05:00
utility-script-to-display-certificates.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00
vault-server-certificate-8573125eeea6.rst
Updates on Certificate Management (pick)
2021-11-09 17:54:11 -03:00