Commit Graph

121 Commits

Author SHA1 Message Date
Bastian Hofmann 11139f18c5 Fix openssl certificate generation command in ADFS docs
The CN must be a hostname without a protocol.

With the protocol the command even fails because of the missing escaping of the forward slashes:

openssl req -x509 -newkey rsa:2048 -keyout myservice.key -out myservice.cert -days 365 -nodes -subj '/CN=https://myservice.example.com'
Generating a 2048 bit RSA private key
..+++
...........................+++
writing new private key to 'myservice.key'
-----
end of string encountered while processing type of subject name element #1
problems making Certificate Request

Signed-off-by: Bastian Hofmann <bashofmann@gmail.com>
2021-05-20 15:50:53 +02:00
vcasado 6569853369 Adding "https://" to the name of the server on line 55
Related to an issue with a customer. Ticket https://rancher.zendesk.com/agent/tickets/12724
2021-04-06 14:06:06 +02:00
Catherine Luse 9330ed7eea Revert "Merge quickstart branch to staging" 2021-01-12 16:19:13 -07:00
Catherine Luse aa172fb1cf Fix internal links 2021-01-12 08:54:21 -07:00
Catherine Luse 2a8f22212a Copy edit in preparation for versioning the docs 2021-01-12 05:28:16 -07:00
Catherine Luse 1cb38149e3 Fix links 2020-12-16 14:39:09 -07:00
Bastian Hofmann 1f67d3268d Add documentation for the new entity ID field in the keycloak configuration
The field was introduced with https://github.com/rancher/rancher/pull/29555 in 2.5.2

Signed-off-by: Bastian Hofmann <bashofmann@gmail.com>
2020-11-12 13:50:27 +01:00
Catherine Luse 272b2cb025 Grammar edit 2020-10-01 06:45:07 -07:00
Tejeev 3badca9684 nested groups bad
We have seen some issues with nested groups
2020-10-01 06:45:07 -07:00
Bastian Hofmann a8d795202b Improve Keycloak authentication documentation
* Explain in text and with screenshots how to correctly configure the Rancher SAML client in Keycloak, including mappers
* Provide examples for field configurations in Rancher that map to the Keycloak defaults
* Move the note on how to get a metadata.xml file with Keycloak >= 6.0.0 directly to the Prerequisites so that it is hard to miss

Signed-off-by: Bastian Hofmann <bashofmann@gmail.com>
2020-08-19 16:43:08 -07:00
David Noland 03218eba4d Added note to PingIdentity auth that metadata & acs URLs will not work until saved 2020-07-06 15:19:08 -07:00
Tejeev 7097db49cb Made the test's need to use the admin user more apparent 2020-06-11 11:13:32 -07:00
jgallucci32 1147cdd424 AD FS attribute examples do not match description
The AD attributes for the AD FS configuration do not match the description. The attributes `givenname` and `name` are reversed. Correcting to match expected output.
2020-06-01 15:26:24 -07:00
Ryan Elliott-Smith 0311856d1e Update Okta authentication docs 2020-05-03 11:08:53 +12:00
Catherine Luse 7bf0696cd5 Fix link to OpenLDAP config reference 2020-05-01 11:27:25 -07:00
Catherine Luse 86b2149713 Add Shibboleth to auth service table 2020-04-23 05:58:23 -07:00
Catherine Luse 1bab175db5 Say nested group membership not available for Shibboleth 2020-03-30 13:35:23 -07:00
Catherine Luse 5be8bebf1b Formatting and link fix 2020-03-30 13:33:04 -07:00
Catherine Luse f8ab934e5d Fix typo 2020-03-30 13:33:04 -07:00
Catherine Luse df0e22022c Minor edit to OpenLDAP doc 2020-03-30 13:33:04 -07:00
Catherine Luse ecfe76a5fa Remove unnecessary line 2020-03-30 13:33:04 -07:00
Catherine Luse a352442a3a Edit Shibboleth and OpenLDAP docs 2020-03-30 13:33:04 -07:00
Catherine Luse 91c28cb387 Revise docs on Shibboleth and OpenLDAP 2020-03-30 13:33:04 -07:00
Catherine Luse 1fdcc57398 Add Shibboleth first draft 2020-03-30 13:33:04 -07:00
Catherine Luse cec21e4e9b Explain how to set up Shibboleth auth 2020-03-30 13:33:04 -07:00
Catherine Luse 46a972fa3e Remove spaces from links 2020-03-30 13:31:53 -07:00
rajashree 85c9601d0c Update AzureAD setup instructions 2020-03-24 16:27:11 -07:00
Catherine Luse e35891a44e Add space 2020-03-17 14:15:09 -07:00
Ryan Elliott-Smith 8bd6fbe8e0 Add note to keycloak auth about saml metadata creation 2020-03-17 09:45:06 +13:00
Ryan Elliott-Smith 9201130987 Add note to keycloak auth about saml metadata creation 2020-03-17 09:42:10 +13:00
Vicken Simonian 6ce580875a Various typo fixes 2020-01-01 23:36:06 -08:00
Robert Parker 3a9cf5d0bb meta updates 2019-12-30 14:48:33 -07:00
Tejeev 7fbffeb714 Made it clearer the second sentence was how you did the first 2019-12-13 11:01:58 +00:00
Robert Parker 3174e9c180 Merge branch 'master' into audit-30.1 2019-12-06 16:27:28 -08:00
Robert Parker ed2a18451e Fix broken links 2019-12-06 16:07:52 -08:00
Catherine Luse 991da75e04 Merge pull request #1637 from catherineluse/rbac
Update and clarify docs on global and cluster permissions
2019-12-03 16:24:48 -07:00
Catherine Luse e6cf88d2ef Edit RBAC docs 2019-12-02 17:46:03 -07:00
Catherine Luse dbd128bd88 Fix link in Google OAuth doc 2019-12-02 13:28:44 -07:00
Eamon Bauman b875447404 Added clarity for objectClass fields in LDAP providers (#1980)
* Made clear the objectClass field requirements

* Made clear requirements for the objectClass field
2019-11-10 08:16:28 -08:00
Bill Maxwell 87f68bbb3c call out we only support sp initiated logins 2019-11-10 08:15:20 -08:00
Catherine Luse 85b93a21f4 Document search filter for AD user schema and group schema 2019-11-03 19:40:38 -08:00
Denise 02036e9553 Merge pull request #1820 from Indevver/audit-23
changing images to responsive images with srcset
2019-10-21 05:33:33 -07:00
rajashree 88422836ff Add instructions on admin email and domain for gsuite 2019-10-10 14:05:38 -07:00
Robert Parker 61c5290211 changing images to responsive images with srcset 2019-10-08 11:26:56 -07:00
Denise b0a52bb544 v2.3 Docs (#1662)
* Cluster Templates docs

* Say to pass private registry as env variable in air gap install

* Add chart compatibility info to Catalog docs

* Edit node pool docs

Add 'the'

Move 'how it works' info to bottom of node pools doc

Move 'how it works' info to bottom of node pools doc

Add steps for disabling node auto-replace

Hide 'How does node auto-replace work' in dropdown

Add hyphen

Only include Rancher UI steps for enable/disable node auto-replace

Only include Rancher UI steps for enable/disable node auto-replace

Change wording around node auto-replace

* Add note about session length setting

* Update _index.md

* quiet option added so output doesn't contain non-image output from RKE in the rancher-images.txt file.

* updating to list-version

* Windows docs usability (#1712)

* Update supported Windows server version

* Edit docs on Windows clusters

* Edit docs on Windows clusters

* Edit Windows node docs

* Minor edits to Windows docs

* Edit node pool docs

Add 'the'

Move 'how it works' info to bottom of node pools doc

Move 'how it works' info to bottom of node pools doc

Add steps for disabling node auto-replace

Hide 'How does node auto-replace work' in dropdown

Add hyphen

Only include Rancher UI steps for enable/disable node auto-replace

Only include Rancher UI steps for enable/disable node auto-replace

Change wording around node auto-replace

* Update _index.md

* Edit Windows cluster docs

* Edit Windows cluster docs for usability

* Update supported Windows server version

* Edit docs on Windows clusters

* Edit Windows node docs

* Minor edits to Windows docs

* Edit Windows cluster docs

* Edit Windows cluster docs for usability

* Minor edits to Windows docs

* Clarify that custom clusters are provisioned with RKE (#1734)

* Clarify that custom clusters are RKE provisioned

* Clarify that custom clusters are RKE provisioned

* Minor edits to Windows/custom cluster docs

* Edit cluster template docs (#1660)

* Cluster Templates docs

* Mention template clusters in cluster provisioning section

* Edit cluster template docs

* Clarify Owner access type for cluster templates

* Mention template clusters in cluster provisioning section

* Edit cluster template docs

* Clarify Owner access type for cluster templates

* Revise cluster template docs

* Revise cluster template docs

* Mention template clusters in cluster provisioning section

* Edit cluster template docs

* Clarify Owner access type for cluster templates

* Revise cluster template docs

* Revise cluster template docs

* Cluster Templates docs

* Mention template clusters in cluster provisioning section

* Mention template clusters in cluster provisioning section

* Edit cluster template docs

* Edit cluster template docs

* Add note about session length setting

* Revise cluster template docs

* quiet option added so output doesn't contain non-image output from RKE in the rancher-images.txt file.

* updating to list-version

* Windows docs usability (#1712)

* Update supported Windows server version

* Edit docs on Windows clusters

* Edit docs on Windows clusters

* Edit Windows node docs

* Minor edits to Windows docs

* Edit node pool docs

Add 'the'

Move 'how it works' info to bottom of node pools doc

Move 'how it works' info to bottom of node pools doc

Add steps for disabling node auto-replace

Hide 'How does node auto-replace work' in dropdown

Add hyphen

Only include Rancher UI steps for enable/disable node auto-replace

Only include Rancher UI steps for enable/disable node auto-replace

Change wording around node auto-replace

* Update _index.md

* Edit Windows cluster docs

* Edit Windows cluster docs for usability

* Update supported Windows server version

* Edit docs on Windows clusters

* Edit Windows node docs

* Minor edits to Windows docs

* Edit Windows cluster docs

* Edit Windows cluster docs for usability

* Minor edits to Windows docs

* Update template docs per UI and permissions changes

* Revise template docs

* Address feedback on RKE template docs

* Fix name of directive in RKE template YAML

* Change env variable to match code from github issue resolution

* Add information for cert-manager

Problem:
cert-manager is old and will be cut off soon

Solution:
Update docs to include current install instructions and instructions on
how to upgrade cert-manager to the current version

* Revamp cert-manager docs

- Condense air gap and normal upgrade instructions for cert-manager down
to a single page. This allowed us to consolidate some repetetive text.
- Add a section explaining cert-manager's API change and the recommended
data migration
- Moved the upgrade instructions out of the cluster administration
section and into the Advanced installation options (not perfect but our
best fit)
- On the pages where we instruct the user to install cert-manger, made a
note and link to our upgrade documentation

* Respond to feedback on RKE template docs (#1757)

* Respond to feedback on RKE template docs

* Respond to feedback on RKE template docs

* Minor edits to RKE template docs

* Change env variable to match code from github issue resolution

* Add information for cert-manager

Problem:
cert-manager is old and will be cut off soon

Solution:
Update docs to include current install instructions and instructions on
how to upgrade cert-manager to the current version

* Add information for cert-manager

Problem:
cert-manager is old and will be cut off soon

Solution:
Update docs to include current install instructions and instructions on
how to upgrade cert-manager to the current version

* Revamp cert-manager docs

- Condense air gap and normal upgrade instructions for cert-manager down
to a single page. This allowed us to consolidate some repetetive text.
- Add a section explaining cert-manager's API change and the recommended
data migration
- Moved the upgrade instructions out of the cluster administration
section and into the Advanced installation options (not perfect but our
best fit)
- On the pages where we instruct the user to install cert-manger, made a
note and link to our upgrade documentation

* Revamp cert-manager docs

- Condense air gap and normal upgrade instructions for cert-manager down
to a single page. This allowed us to consolidate some repetetive text.
- Add a section explaining cert-manager's API change and the recommended
data migration
- Moved the upgrade instructions out of the cluster administration
section and into the Advanced installation options (not perfect but our
best fit)
- On the pages where we instruct the user to install cert-manger, made a
note and link to our upgrade documentation

* Windows docs usability (#1712)

* Update supported Windows server version

* Edit docs on Windows clusters

* Edit docs on Windows clusters

* Edit Windows node docs

* Minor edits to Windows docs

* Edit node pool docs

Add 'the'

Move 'how it works' info to bottom of node pools doc

Move 'how it works' info to bottom of node pools doc

Add steps for disabling node auto-replace

Hide 'How does node auto-replace work' in dropdown

Add hyphen

Only include Rancher UI steps for enable/disable node auto-replace

Only include Rancher UI steps for enable/disable node auto-replace

Change wording around node auto-replace

* Update _index.md

* Edit Windows cluster docs

* Edit Windows cluster docs for usability

* Update supported Windows server version

* Edit docs on Windows clusters

* Edit Windows node docs

* Minor edits to Windows docs

* Edit Windows cluster docs

* Edit Windows cluster docs for usability

* Minor edits to Windows docs

* Edit air gap docs (#1759)

* Edit air gap docs

* Edit air gap installation steps

* add notes about taints on linux worker nodes

* adding node taints docs

* add s3 backup option for self signed certs

* add advanced options systemDefaultRegistry and useBundledSystemChart in helm options

* Add Kubernetes Metadata Feature

* Add google oauth docs

* Air gap install updates (#1791)

* fix single node air gap command

* New air gap layout - overview

* New air gap layout - prepare nodes

* New air gap layout - prepare private registry and add windows instructions

* New air gap layout - install k8s

* New air gap layout - install rancher

* small edits

* Small air gap edits

* small revision to airgap docs

* Edit RKE metadata doc (#1790)

* Edit RKE metadata config docs

* Minor edits to RKE metadata doc

* Minor edits to RKE metadata doc

* Minor edits to K8s metadata doc

* Update note in K8s metadata doc

* Addressing PR review comments

* Google OAuth (#1797)

* Copy edit Google Oauth docs

* Copy edit Google Oauth docs

* Minor edits to Google Oauth doc

* Add info on add ons and agents

* Fix up air gap upgrades based on air gap install edits

* Update example CIDRs for bip ranges

* Missing a L3 Header for General Linux

The current TOC structure is missing a General category which makes it read like CentOS/RHEL is the recommended distro..
Adding a General Linux Recommendations better highlights that the RHEL stuff is additional information for those distros.

* EIO-194: documentation updates for CIS benchmark 1.4.1

* Fix incorrect rendering of bash script

The bash script doesn't display correctly and when copied as is doesn't work due to a leading 'bash' in the command.

* Add info on intermediates recognized CA cert

* Small air gap upgrade updates for consistency

* Remove unnecessary step

* Add taints to nodes

* Update RKE CLI docs with folder info

* Added folder option for s3 backups

* Edit Istio cluster administration docs

* Edit Istio docs

* Edit Istio docs

* Document safe timestamps

* Edit Istio docs

* Edit Istio docs

* Update _index.md

* Add feature flag doc

* Edit feature flag doc

* Change unsupported to experimental

* Change wording

* Edit Istio docs

* Rancher min/max version

* Edit Istio rbac info

* Add c

* Edit Istio rbac section
2019-10-07 22:53:18 -07:00
rajashree bab00c8cd7 Small typo fixes in keycloak docs 2019-09-17 10:31:40 -07:00
Catherine Luse eafe0afaa7 Add SAML caveats shortcode to auth docs 2019-09-04 15:54:08 -07:00
Catherine Luse 351d2999ba Explain Rancher access scope in external auth docs 2019-09-04 13:54:48 -07:00
Rui Lopes e2172b68a7 fix typo 2019-09-02 14:47:26 -07:00
Daniel Koopmans c3d121760c Added instructions/workaround for Keycloak 6.0.1
SAML Metadata IDPSSODescriptor is no longer available on Keycloak 6.0.1.
2019-08-30 08:18:52 -07:00