hscloud

hswaw

hscloud

mirror of https://gerrit.hackerspace.pl/hscloud

Fork 2

Commit Graph

Author	SHA1	Message	Date
q3k	896926c921	prodvider: clean up LDAP connections Change-Id: Ic95e6d1b845832fa0fb2da51b418bcdcb8fd05c4	2019-08-31 15:00:51 +02:00
q3k	b13b7ffcdb	prod{access,vider}: implement Prodaccess/Prodvider allow issuing short-lived certificates for all SSO users to access the kubernetes cluster. Currently, all users get a personal-$username namespace in which they have adminitrative rights. Otherwise, they get no access. In addition, we define a static CRB to allow some admins access to everything. In the future, this will be more granular. We also update relevant documentation. Change-Id: Ia18594eea8a9e5efbb3e9a25a04a28bbd6a42153	2019-08-30 23:08:18 +02:00

Author

SHA1

Message

Date

q3k

896926c921

prodvider: clean up LDAP connections

Change-Id: Ic95e6d1b845832fa0fb2da51b418bcdcb8fd05c4

2019-08-31 15:00:51 +02:00

q3k

b13b7ffcdb

prod{access,vider}: implement

Prodaccess/Prodvider allow issuing short-lived certificates for all SSO
users to access the kubernetes cluster.

Currently, all users get a personal-$username namespace in which they
have adminitrative rights. Otherwise, they get no access.

In addition, we define a static CRB to allow some admins access to
everything. In the future, this will be more granular.

We also update relevant documentation.

Change-Id: Ia18594eea8a9e5efbb3e9a25a04a28bbd6a42153

2019-08-30 23:08:18 +02:00

2 Commits (9736a6adc3054df4dcf500a949ea8641e300aa73)