[K8S] Documentation kubeconfig with IAM #2575
Draft
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
bene2k1
added
do not merge
jcirinosclwy
reviewed
Jan 9, 2024
containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
Outdated
Show resolved
Hide resolved
bene2k1
commented
Jan 9, 2024
bene2k1
commented
Jan 9, 2024
jcirinosclwy
reviewed
Jan 9, 2024
jcirinosclwy
approved these changes
Jan 9, 2024
bene2k1
commented
Jan 9, 2024
jcirinosclwy
reviewed
Jan 9, 2024
jcirinosclwy
reviewed
Jan 9, 2024
bene2k1
commented
Jan 9, 2024
containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
Outdated
Show resolved
Hide resolved
nerda-codes
reviewed
Jan 9, 2024
containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
Outdated
Show resolved
Hide resolved
containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
Outdated
Show resolved
Hide resolved
containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
Outdated
Show resolved
Hide resolved
containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
Outdated
Show resolved
Hide resolved
containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
Outdated
Show resolved
Hide resolved
containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
Outdated
Show resolved
Hide resolved
containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
Outdated
Show resolved
Hide resolved
containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
Outdated
Show resolved
Hide resolved
RoRoJ
approved these changes
Jan 12, 2024
containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
Show resolved
Hide resolved
containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
Show resolved
Hide resolved
bene2k1
changed the title
bene2k1
commented
Jul 4, 2024
bene2k1
commented
Jul 4, 2024
…d-implement-rbac.mdx Co-authored-by: Jessica <[email protected]>
…d-implement-rbac.mdx
Co-authored-by: Jessica <[email protected]>
Co-authored-by: nerda-codes <[email protected]>
Co-authored-by: ldecarvalho-doc <[email protected]>
Co-authored-by: ldecarvalho-doc <[email protected]>
github-actions
bot
added
the
status: draft
bene2k1
commented
Nov 4, 2024
Co-authored-by: Rowena Jones <[email protected]>
jcirinosclwy
reviewed
Dec 2, 2024
| <Macro id="iam-requirements" /> | ||
|
|
||
| <Message type="requirement"> | ||
| - You have an account and are logged into the [Scaleway console](https://console.scaleway.com) |
There was a problem hiding this comment.
Suggested change
| - You have an account and are logged into the [Scaleway console](https://console.scaleway.com) | |
| - A Scaleway account logged into the [console](https://console.scaleway.com) |
jcirinosclwy
reviewed
Dec 2, 2024
|
|
||
| <Message type="requirement"> | ||
| - You have an account and are logged into the [Scaleway console](https://console.scaleway.com) | ||
| - You have [created](/containers/kubernetes/how-to/create-cluster) a Kubernetes Kapsule cluster |
There was a problem hiding this comment.
Suggested change
| - You have [created](/containers/kubernetes/how-to/create-cluster) a Kubernetes Kapsule cluster | |
| - [Created](/containers/kubernetes/how-to/create-cluster) a Kubernetes Kapsule cluster |
jcirinosclwy
reviewed
Dec 2, 2024
| - kubernetes | ||
| --- | ||
|
|
||
|
|
jcirinosclwy
reviewed
Dec 2, 2024
| - Applications within the cluster are authenticated using specific tokens. | ||
| - This authentication method is particularly useful when a pod needs to interact with the Kubernetes API, as it can authenticate using its associated [Service Account](https://kubernetes.io/docs/concepts/security/service-accounts/). | ||
|
|
||
| [Identity and Access Management (IAM)](https://www.scaleway.com/en/docs/identity-and-access-management/iam/concepts/#iam) provides control over resource access. IAM policies enable the configuration of permissions for Kubernetes Kapsule clusters at the Project level. |
There was a problem hiding this comment.
Suggested change
| [Identity and Access Management (IAM)](https://www.scaleway.com/en/docs/identity-and-access-management/iam/concepts/#iam) provides control over resource access. IAM policies enable the configuration of permissions for Kubernetes Kapsule clusters at the Project level. | |
| [Identity and Access Management (IAM)](/identity-and-access-management/iam/concepts/#iam) provides control over resource access. IAM policies enable the configuration of permissions for Kubernetes Kapsule clusters at the Project level. |
jcirinosclwy
reviewed
Dec 2, 2024
|
|
||
| [Identity and Access Management (IAM)](https://www.scaleway.com/en/docs/identity-and-access-management/iam/concepts/#iam) provides control over resource access. IAM policies enable the configuration of permissions for Kubernetes Kapsule clusters at the Project level. | ||
|
|
||
| An [IAM policy](https://www.scaleway.com/en/docs/identity-and-access-management/iam/concepts/#policy) defines the permissions for users, groups, and applications within an Organization. It consists of a [principal](https://www.scaleway.com/en/docs/identity-and-access-management/iam/concepts/#principal) (the user, group, or application to which it applies) and IAM rules that specify permission sets and their scope. |
There was a problem hiding this comment.
Suggested change
| An [IAM policy](https://www.scaleway.com/en/docs/identity-and-access-management/iam/concepts/#policy) defines the permissions for users, groups, and applications within an Organization. It consists of a [principal](https://www.scaleway.com/en/docs/identity-and-access-management/iam/concepts/#principal) (the user, group, or application to which it applies) and IAM rules that specify permission sets and their scope. | |
| An [IAM policy](/identity-and-access-management/iam/concepts/#policy) defines the permissions for users, groups, and applications within an Organization. It consists of a [principal](/identity-and-access-management/iam/concepts/#principal) (the user, group, or application to which it applies) and IAM rules that specify permission sets and their scope. |
jcirinosclwy
reviewed
Dec 2, 2024
| The [combination of IAM and Kubernetes RBAC (Role-based Acccess Control)](/containers/kubernetes/reference-content/set-iam-permissions-and-implement-rbac/) allows you to define fine-grained access levels for cluster users. | ||
|
|
||
| <Message type="important"> | ||
| Entering a deprecation cycle, the former authentication system (using static admin tokens) remains active until the second half of 2024: all your legacy Kubeconfig files keep access to their clusters for the time being. For security purposes, you can still use the ["reset admin token" feature](/containers/kubernetes/how-to/revoke-kubeconfig/), either through our Kubernetes API or Scaleway’s CLI. |
There was a problem hiding this comment.
Is it really second half of 2024? Or Q1 2025, as we're mentioning on the console?
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Your checklist for this pull request
Description
Please describe what you added or changed.