Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add RBAC auth and CA controller to Theia manager #113

Merged
merged 2 commits into from
Oct 7, 2022
Merged

Add RBAC auth and CA controller to Theia manager #113

merged 2 commits into from
Oct 7, 2022

Commits on Oct 7, 2022

  1. Add RBAC auth for Theia Manager 

    This change adds k8s auth delegation to theia manager, and adds template
of cli service account / cluster role to allow access for specified API
groups and resources. A SA toekn secret is also added that can be used
for CLI to auth with Theia manager.

Signed-off-by: Shawn Wang <wshaoquan@vmware.com>
    @wsquan171
    wsquan171 committed Oct 7, 2022
    Configuration menu
    Copy the full SHA
    c13b90d View commit details
    Browse the repository at this point in the history

  2. Add API server cert controller 

    This change adds certificate controller to Theia manager. The public key
of API server TLS in case of self-signed, or CA cert in case of user
provided TLS, will be exposed to clients via configmap "theia-ca" in
flow-visibility namespace. This will allow cURL or client requests to be
made in "secure" fashion if the ca cert is added to trust chain.

The configmap will be updated when user provided TLS bundle is changed,
or the self-signed cert is rotated upon expiration.

Signed-off-by: Shawn Wang <wshaoquan@vmware.com>
    @wsquan171
    wsquan171 committed Oct 7, 2022
    Configuration menu
    Copy the full SHA
    dc4b28f View commit details
    Browse the repository at this point in the history