cheshire
/
hscloud
forked from hswaw/hscloud
1
0
Fork 0
Code Pull Requests Activity
1,067 Commits
1 Branch
0 Tags
55 MiB
Commit Graph

3 Commits (e1aa63c7dd50b6e907142e92369903b098a65a34)

Author SHA1 Message Date
q3k 432fa30ded cluster/certs: bump ca-kube-prodivider 
Redeployed.

Change-Id: I01110433f89df5595de0f9587508104d6091a774
 2021-08-29 17:20:59 +00:00
patryk 8d069d8d1a cluster/certs: refresh prodvider CA 
Change-Id: I35578fb62ddf10e7419c2c347e70322cf4ea0b6a
 2020-09-01 22:02:52 +00:00
q3k b13b7ffcdb prod{access,vider}: implement 
Prodaccess/Prodvider allow issuing short-lived certificates for all SSO
users to access the kubernetes cluster.

Currently, all users get a personal-$username namespace in which they
have adminitrative rights. Otherwise, they get no access.

In addition, we define a static CRB to allow some admins access to
everything. In the future, this will be more granular.

We also update relevant documentation.

Change-Id: Ia18594eea8a9e5efbb3e9a25a04a28bbd6a42153
 2019-08-30 23:08:18 +02:00