forked from hswaw/hscloud
Prodaccess/Prodvider allow issuing short-lived certificates for all SSO users to access the kubernetes cluster. Currently, all users get a personal-$username namespace in which they have adminitrative rights. Otherwise, they get no access. In addition, we define a static CRB to allow some admins access to everything. In the future, this will be more granular. We also update relevant documentation. Change-Id: Ia18594eea8a9e5efbb3e9a25a04a28bbd6a42153
28 lines
632 B
Text
28 lines
632 B
Text
load("@bazel_tools//tools/build_defs/pkg:pkg.bzl", "pkg_tar", "pkg_deb")
|
|
load("//bzl:rules.bzl", "copy_go_binary")
|
|
|
|
py_library(
|
|
name = "secretstore_lib",
|
|
srcs = ["secretstore.py"],
|
|
visibility = ["//visibility:public"],
|
|
)
|
|
|
|
py_binary(
|
|
name = "secretstore",
|
|
python_version = "PY3",
|
|
srcs = ["secretstore.py"],
|
|
visibility = ["//visibility:public"],
|
|
)
|
|
|
|
py_binary(
|
|
name = "pass",
|
|
python_version = "PY3",
|
|
srcs = ["pass.py"],
|
|
visibility = ["//visibility:public"],
|
|
)
|
|
|
|
copy_go_binary(
|
|
name = "prodaccess",
|
|
src = "//cluster/prodaccess:prodaccess",
|
|
visibility = ["//visibility:public"],
|
|
)
|