Commit Graph

288 Commits

Author SHA1 Message Date
Bastian Hofmann 11139f18c5 Fix openssl certificate generation command in ADFS docs
The CN must be a hostname without a protocol.

With the protocol the command even fails because of the missing escaping of the forward slashes:

openssl req -x509 -newkey rsa:2048 -keyout myservice.key -out myservice.cert -days 365 -nodes -subj '/CN=https://myservice.example.com'
Generating a 2048 bit RSA private key
..+++
...........................+++
writing new private key to 'myservice.key'
-----
end of string encountered while processing type of subject name element #1
problems making Certificate Request

Signed-off-by: Bastian Hofmann <bashofmann@gmail.com>
2021-05-20 15:50:53 +02:00
dkeightley 04a9c3a9a8 Update hyperlink typo 2021-05-10 15:05:45 +12:00
vcasado 6569853369 Adding "https://" to the name of the server on line 55
Related to an issue with a customer. Ticket https://rancher.zendesk.com/agent/tickets/12724
2021-04-06 14:06:06 +02:00
Catherine Luse 2d21540606 Replace 'prior to' with 'before' in versioned docs #3040 2021-02-23 16:43:34 -07:00
Catherine Luse 9330ed7eea Revert "Merge quickstart branch to staging" 2021-01-12 16:19:13 -07:00
Catherine Luse aa172fb1cf Fix internal links 2021-01-12 08:54:21 -07:00
Catherine Luse 2a8f22212a Copy edit in preparation for versioning the docs 2021-01-12 05:28:16 -07:00
dkeightley 4506d037c9 Update URL fragment for a registry with credentials 2021-01-08 16:13:11 +13:00
Catherine Luse 1cb38149e3 Fix links 2020-12-16 14:39:09 -07:00
Bastian Hofmann 1f67d3268d Add documentation for the new entity ID field in the keycloak configuration
The field was introduced with https://github.com/rancher/rancher/pull/29555 in 2.5.2

Signed-off-by: Bastian Hofmann <bashofmann@gmail.com>
2020-11-12 13:50:27 +01:00
Alex Seymour b799542fb3 Remove secrets from read only project role
The read only project role does not grant the permission to view secrets, this commit updates the Project Role Reference table to reflect this
2020-10-19 10:16:32 -07:00
Catherine Luse d3c06b767d Fix backup/restore links 2020-10-06 12:26:43 -07:00
Catherine Luse f79e1d9305 Fix merge conflicts pulling master into staging 2020-10-05 20:32:20 -07:00
Catherine Luse 5104e99b7a Grammar edit 2020-10-05 18:11:34 -07:00
Catherine Luse f84a83d825 Explain restricted-admin role 2020-10-05 18:11:34 -07:00
Catherine Luse 272b2cb025 Grammar edit 2020-10-01 06:45:07 -07:00
Tejeev 3badca9684 nested groups bad
We have seen some issues with nested groups
2020-10-01 06:45:07 -07:00
Tejeev e26d76e1c1 Added note to describe how to set metadata for manual refresh only 2020-09-14 17:36:11 -07:00
Alex Seymour d46a8d9b71 Call out need to select resource from dropdown
When entering a resource name into the grant Resource text field, the user must select the resource from the dropdown below, and cannot simply click-off or tab to the next field without selection from the dropdown, or no resource will be selected.
2020-08-31 10:54:24 -07:00
Catherine Luse 8678b0ef28 Reorganize doc structure 2020-08-28 14:50:55 -07:00
Bastian Hofmann a8d795202b Improve Keycloak authentication documentation
* Explain in text and with screenshots how to correctly configure the Rancher SAML client in Keycloak, including mappers
* Provide examples for field configurations in Rancher that map to the Keycloak defaults
* Move the note on how to get a metadata.xml file with Keycloak >= 6.0.0 directly to the Prerequisites so that it is hard to miss

Signed-off-by: Bastian Hofmann <bashofmann@gmail.com>
2020-08-19 16:43:08 -07:00
David Noland a37a037c57 Added note to PingIdentity auth that metadata & acs URLs will not work until saved 2020-07-27 16:18:38 -07:00
Tejeev 5153d83f90 Made the test's need to use the admin user more apparent 2020-07-27 16:18:38 -07:00
jgallucci32 76ab3e00f5 AD FS attribute examples do not match description
The AD attributes for the AD FS configuration do not match the description. The attributes `givenname` and `name` are reversed. Correcting to match expected output.
2020-07-27 16:18:38 -07:00
Aleksandar Petreski 58c9fd8a62 Add missing User-Base Global Permission
As rancher list the following global permissions:

 Administrator
Administrators have full control over the entire installation and all resources in all clusters.

 Standard User
Standard Users can create new clusters and manage clusters and projects they have been granted access to.

 User-Base
User-Base users have login-access only.

if i understand correctly the concept i think that this should be reflected in the Readme file as well.
2020-07-27 16:18:37 -07:00
Ryan Elliott-Smith 372a514fba Update Okta authentication docs 2020-07-27 16:18:06 -07:00
Catherine Luse e6a4611d39 Fix link to OpenLDAP config reference 2020-07-27 16:18:06 -07:00
Catherine Luse 0d21e37669 Add Shibboleth to auth service table 2020-07-27 16:18:06 -07:00
David Noland 03218eba4d Added note to PingIdentity auth that metadata & acs URLs will not work until saved 2020-07-06 15:19:08 -07:00
Tejeev 7097db49cb Made the test's need to use the admin user more apparent 2020-06-11 11:13:32 -07:00
jgallucci32 1147cdd424 AD FS attribute examples do not match description
The AD attributes for the AD FS configuration do not match the description. The attributes `givenname` and `name` are reversed. Correcting to match expected output.
2020-06-01 15:26:24 -07:00
Aleksandar Petreski b6c47e67b5 Add missing User-Base Global Permission
As rancher list the following global permissions:

 Administrator
Administrators have full control over the entire installation and all resources in all clusters.

 Standard User
Standard Users can create new clusters and manage clusters and projects they have been granted access to.

 User-Base
User-Base users have login-access only.

if i understand correctly the concept i think that this should be reflected in the Readme file as well.
2020-06-01 15:10:22 -07:00
Ryan Elliott-Smith 0311856d1e Update Okta authentication docs 2020-05-03 11:08:53 +12:00
Catherine Luse 7bf0696cd5 Fix link to OpenLDAP config reference 2020-05-01 11:27:25 -07:00
Catherine Luse 86b2149713 Add Shibboleth to auth service table 2020-04-23 05:58:23 -07:00
Catherine Luse bf6d245669 Replace the word ellipsis with vertical ellipsis 2020-04-02 04:19:09 -07:00
Catherine Luse 164d548380 Clarify result of creating/attaching cluster to RKE template 2020-04-01 23:11:58 -07:00
Catherine Luse 9997395be0 Make K8s metadata air gap section more generic 2020-04-01 21:50:03 -07:00
Catherine Luse 63ef8d4266 Say that branch not needed for K8s metadata in Rancher v2.4 2020-04-01 21:41:04 -07:00
Denise Schannon 924663747c small updates around custom global roles 2020-03-30 19:03:40 -07:00
Catherine Luse c0659b98cb Minor edits 2020-03-30 13:35:23 -07:00
Catherine Luse 1bab175db5 Say nested group membership not available for Shibboleth 2020-03-30 13:35:23 -07:00
Catherine Luse 5be8bebf1b Formatting and link fix 2020-03-30 13:33:04 -07:00
Catherine Luse f8ab934e5d Fix typo 2020-03-30 13:33:04 -07:00
Catherine Luse df0e22022c Minor edit to OpenLDAP doc 2020-03-30 13:33:04 -07:00
Catherine Luse ecfe76a5fa Remove unnecessary line 2020-03-30 13:33:04 -07:00
Catherine Luse a352442a3a Edit Shibboleth and OpenLDAP docs 2020-03-30 13:33:04 -07:00
Catherine Luse 91c28cb387 Revise docs on Shibboleth and OpenLDAP 2020-03-30 13:33:04 -07:00
Catherine Luse 1fdcc57398 Add Shibboleth first draft 2020-03-30 13:33:04 -07:00
Catherine Luse cec21e4e9b Explain how to set up Shibboleth auth 2020-03-30 13:33:04 -07:00