-
Notifications
You must be signed in to change notification settings - Fork 11
[DO NOT MERGE YET] Staging-2.12. Should be merged when rancher 2.12 is released (RBAC mostly) #41
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: staging
Are you sure you want to change the base?
Conversation
…mission naming" This reverts commit 3b459f5.
@@ -18,9 +18,38 @@ The result of this configuration should produce a *clientId* and a *secret*. Cop | |||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
TODO: Add additional documentation to rancher prime install to setup OIDC when RBAC is required.
@@ -18,9 +18,38 @@ The result of this configuration should produce a *clientId* and a *secret*. Cop | |||
|
|||
== Configure SUSE Observability for OIDC | |||
|
|||
=== Rancher | |||
|
|||
To configure Rancher as the OIDC provider for SUSE Observability, you need to add the OIDC details to the authentication values: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Document here that this only works with rancher 2.12
secret: "<oidc-secret>" | ||
baseUrl: "<rancher-url>" | ||
---- | ||
You can override and extend the OIDC config for Rancher with the following fields: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Cross-link with rancher docs: rancher/rancher-docs#1844
…Add notes regarding Configuration and Kubernetes subjects being immutable
STAC-22990: Document describe subjects and the meaning of the field.…
Prefer the use of service tokens over api keys
…on-roles STAC-23049: describe user-session roles command
STAC-22956: document how to add observability as a data source to gra…
…mission naming"
This reverts commit 3b459f5.