q3k b13b7ffcdb prod{access,vider}: implement ... Prodaccess/Prodvider allow issuing short-lived certificates for all SSO users to access the kubernetes cluster. Currently, all users get a personal-$username namespace in which they have adminitrative rights. Otherwise, they get no access. In addition, we define a static CRB to allow some admins access to everything. In the future, this will be more granular. We also update relevant documentation. Change-Id: Ia18594eea8a9e5efbb3e9a25a04a28bbd6a42153		2019-08-30 23:08:18 +02:00
..
kube.libsonnet	cluster/kube: set operator replicas to 0	2019-06-20 16:42:19 +02:00
policies.libsonnet	prod{access,vider}: implement	2019-08-30 23:08:18 +02:00
postgres.libsonnet	ceph-waw1 -> ceph-waw2	2019-08-08 17:49:31 +02:00
redis.libsonnet	app/toot: start implementing redis	2019-04-04 16:54:00 +02:00