hscloud/cluster/clustercfg
Sergiusz Bazanski b13b7ffcdb prod{access,vider}: implement
Prodaccess/Prodvider allow issuing short-lived certificates for all SSO
users to access the kubernetes cluster.

Currently, all users get a personal-$username namespace in which they
have adminitrative rights. Otherwise, they get no access.

In addition, we define a static CRB to allow some admins access to
everything. In the future, this will be more granular.

We also update relevant documentation.

Change-Id: Ia18594eea8a9e5efbb3e9a25a04a28bbd6a42153
2019-08-30 23:08:18 +02:00
..
.gitignore cluster/clustercfg: gitignore __pycache__ 2019-05-19 03:11:18 +02:00
BUILD *: move away from python_rules 2019-07-16 22:22:05 +00:00
ca.py prod{access,vider}: implement 2019-08-30 23:08:18 +02:00
clustercfg.py prod{access,vider}: implement 2019-08-30 23:08:18 +02:00