hscloud/README

HSCloud
=======

This is a monorepo. You'll need bash and Bazel 0.20.0+ to use it.

You'll also need Nix installed globally in your system until [rules_nixpkgs/75](https://github.com/tweag/rules_nixpkgs/issues/75) is resolved. Or run on NixOS.

Getting started
---------------

    cd hscloud
    . env.sh # setup PATH and hscloud_root
    tools/install.sh # build tools


Then, to get Kubernetes access to k0.hswaw.net (current nearly-production cluster):

    prodaccess
    kubectl version

You will automatically get a `personal-$USERNAME` namespace created in which you have full admin rights.
*: k0.hswaw.net somewhat working 2019-01-13 20:14:02 +00:00			`HSCloud`
			`=======`

			`This is a monorepo. You'll need bash and Bazel 0.20.0+ to use it.`

tools/: add nixops This now means we require Nix to be installed globally. This shouldn't be the case in the long run, but will be until https://github.com/tweag/rules_nixpkgs/issues/75 gets fixed or we maybe move from rules_nixpkgs to nix-bundle or something similar. 2019-05-15 17:08:25 +00:00			`You'll also need Nix installed globally in your system until [rules_nixpkgs/75](https://github.com/tweag/rules_nixpkgs/issues/75) is resolved. Or run on NixOS.`

*: k0.hswaw.net somewhat working 2019-01-13 20:14:02 +00:00			`Getting started`
			`---------------`

			`cd hscloud`
			`. env.sh # setup PATH and hscloud_root`
			`tools/install.sh # build tools`

README: mention k0 API host 2019-01-17 23:24:13 +00:00
prod{access,vider}: implement Prodaccess/Prodvider allow issuing short-lived certificates for all SSO users to access the kubernetes cluster. Currently, all users get a personal-$username namespace in which they have adminitrative rights. Otherwise, they get no access. In addition, we define a static CRB to allow some admins access to everything. In the future, this will be more granular. We also update relevant documentation. Change-Id: Ia18594eea8a9e5efbb3e9a25a04a28bbd6a42153 2019-08-29 18:12:24 +00:00			`Then, to get Kubernetes access to k0.hswaw.net (current nearly-production cluster):`
README: mention k0 API host 2019-01-17 23:24:13 +00:00
prod{access,vider}: implement Prodaccess/Prodvider allow issuing short-lived certificates for all SSO users to access the kubernetes cluster. Currently, all users get a personal-$username namespace in which they have adminitrative rights. Otherwise, they get no access. In addition, we define a static CRB to allow some admins access to everything. In the future, this will be more granular. We also update relevant documentation. Change-Id: Ia18594eea8a9e5efbb3e9a25a04a28bbd6a42153 2019-08-29 18:12:24 +00:00			`prodaccess`
*: k0.hswaw.net somewhat working 2019-01-13 20:14:02 +00:00			`kubectl version`
README: mention purpose of k0 2019-01-17 23:28:28 +00:00
prod{access,vider}: implement Prodaccess/Prodvider allow issuing short-lived certificates for all SSO users to access the kubernetes cluster. Currently, all users get a personal-$username namespace in which they have adminitrative rights. Otherwise, they get no access. In addition, we define a static CRB to allow some admins access to everything. In the future, this will be more granular. We also update relevant documentation. Change-Id: Ia18594eea8a9e5efbb3e9a25a04a28bbd6a42153 2019-08-29 18:12:24 +00:00			You will automatically get a `personal-$USERNAME` namespace created in which you have full admin rights.