* Update Shibboleth OpenLDAP instructions to reflect current UI
These settings would have, if followed verbatim, actually configured
an OpenLDAP Auth Provider, bypassing Shibboleth entirely. In order
to configure a Shibboleth provider with added OpenLDAP, one must start
with a Shibboleth base, not an OpenLDAP one.
* Document the new OpenLDAP functionality for Okta Auth Providers
These changes are pulled directly from the Shibboleth provider with
minimal touchups to ensure the correct UI elements are referenced
in steps. I've tried to include all relevant warnings and security
callouts, but I've otherwise left the language alone, as the original
text seems fine.
* Cleaned up language and updated several links, based on feedback
* Remove/cleanup language. OpenLDAP is not required for group permissions
Also some light rearrangement for flow, a few redundant statements
removed, and syntax cleanup on one of the lists.
* Add link to Okta user account creation instructions
Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>
* Edit TLS notice language for brevity
Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>
* Warn that the service account is shared across all of Rancher
---------
Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>
Check shows link as dead, but page redirects. The target site uses Docusaurus
which shows a 404 initially then redirects due to the trailing slash used.
Added callout to include --set global.cattle.psp.enabled=false to Helm install command for K8s v1.25 or greater. Also removed stale CertManager reference and updated --version example to show a more recent Rancher version.
* Addressing request to re-add notes regarding 2.6
* versioned docs updated as well
* rm'ed note from page that didn't need it added back
* zh pages + missing en page
* #462 Add Add instructions for how to use PSACT
* started adding instructions for adding/editing a cluster
* started adding instructions for add/editing a psa template
* instructions for rke2/k3s, note about cis
* updated to include RKE1 instructions
* wording
* nipicky word choice: applied > described
* Apply suggestions from code review
Co-authored-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
* tabs, added suggestion on RKe2 link from thread
* sidebars, correcting language in hardening guide
* link, switching where list of exempt namespaces is placed, corrections - users edit the PSA config, not PSS, to establish restrictions on pods
* update link
* added final save/create instructions
* Apply suggestions from code review
Co-authored-by: Billy Tat <btat@suse.com>
* updated file names
* missing metadata key
* corrected links
* Delete psa-config-template.md
File shouldn't still be in the tree, as it was renamed
* Apply suggestions from code review
Co-authored-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
* syncing RKE1 and 2 hardening guides, title update
* moved sample config file, added - to list of required exempt namespaces
* added moved config file to sidebars.js
---------
Co-authored-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
Co-authored-by: Billy Tat <btat@suse.com>
Marty Hernandez Avedon
Billy Tat
Marty Hernandez Avedon
nflyntandMarty Hernandez Avedon
vickyhella
Frank MurphyandMarty Hernandez Avedon
Paulo Gomes
Guilherme Macedo
Vasili
Klaus Kämpf