version 1 release
This commit is contained in:
35
README.md
35
README.md
@@ -4,27 +4,23 @@
|
||||
|
||||
### Quickstart
|
||||
|
||||
1. Start Docker
|
||||
2. Run createprojectspace.sh
|
||||
|
||||
```bash
|
||||
./createprojectspace.sh <server_fqdn> <username>
|
||||
# Create certsigner pod for all other operations
|
||||
./setup.sh <server_fqdn>
|
||||
|
||||
# Create a user, use "admin" to create an admin user
|
||||
./adduser <server_fqdn> <user>
|
||||
|
||||
# Create a namespace and allow <user> to access it
|
||||
./createprojectspace <server_fqdn> <user> <project>
|
||||
|
||||
# Update a project namespace with the contents of ./namespace
|
||||
./updateprojectspace <server_fqdn> <user> <project>
|
||||
|
||||
# Remove a user, their namespace, and their access
|
||||
./removeuserspace <server_fqdn> <user>
|
||||
```
|
||||
|
||||
### Update a user
|
||||
|
||||
```bash
|
||||
export USER=user
|
||||
helm template $USER ./namespace | kubectl --context admin apply -f -
|
||||
```
|
||||
|
||||
### Objectives
|
||||
|
||||
1. Provision a namespace with clusterroles, rolebindings, and a dedicated nfs-provisioner with one helm chart
|
||||
2. Create an easy way for users to sign their certificates
|
||||
3. Create a cleanup script without deleting user data
|
||||
4. profit
|
||||
|
||||
### Userspace
|
||||
|
||||
#### Namespace
|
||||
@@ -122,7 +118,8 @@ kubectl -n kube-system create secret generic certsigner --from-file /var/lib/ran
|
||||
#### Set up the certsigner pod
|
||||
|
||||
```bash
|
||||
kubectl --context admin apply -f certsigner
|
||||
scp certsigner.yaml <server>:~/certsigner.yaml
|
||||
kubectl apply -f certsigner.yaml
|
||||
```
|
||||
|
||||
#### Generate a cert
|
||||
|
||||
Reference in New Issue
Block a user