Skip to content

Commit

Permalink
Deploying to gh-pages from @ 6f91da3 🚀
Browse files Browse the repository at this point in the history
  • Loading branch information
Hub Action committed Oct 21, 2024
1 parent d55a720 commit 5b7b3a2
Show file tree
Hide file tree
Showing 118 changed files with 655 additions and 506 deletions.
1 change: 0 additions & 1 deletion ...o-cloud/_images/namespace-policies-85539c6901ff5c01f770117c173448d4b54f524f.svg
View file

This file was deleted.

154 changes: 152 additions & 2 deletions appuio-cloud/explanations/policies.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1155,9 +1155,159 @@ <h3 id="_request_flow_and_policy_execution"><a class="anchor" href="#_request_fl
</tr>
</table>
</div>
<div class="imageblock kroki">
<div class="literalblock kroki-error">
<div class="content">
<img src="../_images/namespace-policies-85539c6901ff5c01f770117c173448d4b54f524f.svg" alt="namespace-policies">
<pre> /---------------\
| cFD0 |
| CREATE |
| Namespace, |
| ProjectRequest|
| |
\-------+-------/
|
|
PRIV v
+---------------------+
| +---------------+ |
| |cBLUVALIDATE | |
| +---------------+ | yes
| Principal is allowed+------------------------------------+
| to bypass policies | |
| {d} | |
+----------+----------+ |
| |
|no |
| |
NMEV v |
+--------------------+ |
| +---------------+ | |
| |cBLUVALIDATE | | |
| +---------------+ | |
yes | Check if requested| |
+---------------------------+ namespace/project | |
| | name matches a | |
| | reserved prefix | |
| | {d} | |
| +----------+---------+ |
| | |
| |no |
| | |
| +-----------------------+-----------------+ |
| | | |
| |CREATE |CREATE |
| |ProjectRequest |Namespace |
| | | |
| | +--------------+--------------+ |
| ORG_NS v | | |
| +-----------------+ |Principal Principal| |
| |+---------------+| |is User is SA| |
| ||cBLUVALIDATE || v v |
| |+---------------+| +----------------------+ +----------------------+ |
| | Check that user| no :ORG_NS | :ORG_NS | |
| | has default +----+ | +-----------------+ | | +----------------+ | |
| | organization | | | | +-------------+ | | | | +-------------+| | |
| | {d} | | | | |cPNKMUTATE | | | | | |cPNKMUTATE || | |
| +-----------------+ | | | +-------------+ | | | | +-------------+| | |
| | | | | Inject user's| | | | Inject SA's | | |
| |yes | | | default | | | | organization| | |
| | | | | organization | | | | if no label | | |
| v | | | if no label | | | | in request | | |
| +--------+ | | | in request | | | | {d} | | |
| | c2A2 | | | | {d} | | | +----------------+ | |
| | ALLOW | | | +-----------------+ | | | | |
| | request| | | | | | v | |
| | | | | v | | +------------------+ | |
| +---+----+ | | +------------------+ | | |+---------------+ | | |
| | | | |+---------------+ | | | ||cBLUVALIDATE | | | |
| | | | ||cBLUVALIDATE | | | | |+---------------+ | | |
| v | | |+---------------+ | | | | Check that NS | | |
| /------------------\ | | | Check that NS | | | | belongs to | | |
| | cFD0 | | | | belongs to | | | | organization | | |
| | CREATE Project[1]| | | | organization | | | | and that it | | |
| | | | | | and user is | | | | matches SA's | | |
| \--------+---------/ | | | member of it | | | | organization | | |
| | | | | {d} | | | | {d} | | |
| | | | +------------------+ | | +------------------+ | |
| PRJ_ORG v | | | | | |
| +---------------+ | +-------+------+-------+ +-------+------+-------+ |
| |+-------------+| | | | | | |
| ||cPNKMUTATE || | | | | | |
| |+-------------+| | | | | | |
| | Inject | | | | | | |
| | organization | | | | | | |
| | from project | | no | | | | |
| | annotation | +----------|------+---------------------|------+ |
| | {d} | | | | |
| +-------+-------+ | | | |
| | | | yes | |
| | | +------------+---------------+ |
| v | | |
| /--------------------\ | | |
| | cFD0 | | | |
| | triggers | | | |
| | CREATE Namespace[2]| | | |
| | | | NS_QUOT v |
| \---------+----------/ | +-----------------+ |
| | | |+---------------+| |
| | | ||cBLUVALIDATE || |
| | | |+---------------+| |
| | | no | Check if | |
| | +--------------+ organization | |
| | | | can create | |
| | | | more namespaces| |
| | | | {d} | |
| | | +--------+--------+ |
| | | | |
| | | |yes |
| | | | |
| | | NMEV v |
| | | +-----------------+ |
| | | |+---------------+| |
| | | ||cBLUVALIDATE || |
| | | |+---------------+| |
| | | no | Check if | |
| | +--------------+ the request only| |
| | | | contains allowed| |
| | | | labels and | |
| | | | annotations | |
| | | |{d} | |
| | | +--------+--------+ |
| | | | |
| | | |yes |
| | | | |
| | v v |
| | +--------+ +--------+ |
| | | cRED | | c2A2 | |
+------------|---------&gt;| DENY | | ALLOW |&lt;----------------------------+
| | request| | request|
| | | | |
| +--------+ +---+----+
| |
| |
| v
| /----------------\
| | cFD0 |
| | CREATE |
+-----------------------------&gt;| Namespace with |
| organization |
| label |
| |
\-------+--------/
|
|
+--------------+--------------+
| |
ORG_RBAC v RES_QUOT v
+-----------------+ +---------------------+
|+---------------+| | +---------------+ |
||cYELRECONCILE || | |cYELRECONCILE | |
|+---------------+| | +---------------+ |
| Grant the | | Create |
| organization | | ResourceQuota and |
| Role "admin" | | LimitRange objects|
| in the NS | | in the namespace |
|{d} | |{d} |
+-----------------+ +---------------------+</pre>
</div>
</div>
<div class="colist arabic">
Expand Down
2 changes: 1 addition & 1 deletion search-index.js
View file

Large diffs are not rendered by default.

8 changes: 4 additions & 4 deletions sitemap-acme-dns.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,18 +2,18 @@
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://hub.syn.tools/acme-dns/how-tos/configure-client.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
<url>
<loc>https://hub.syn.tools/acme-dns/how-tos/setup.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
<url>
<loc>https://hub.syn.tools/acme-dns/index.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
<url>
<loc>https://hub.syn.tools/acme-dns/references/parameters.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
</urlset>
10 changes: 5 additions & 5 deletions sitemap-adhoc-configurations.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,22 +2,22 @@
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://hub.syn.tools/adhoc-configurations/how-tos/patches.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
<url>
<loc>https://hub.syn.tools/adhoc-configurations/how-tos/quickstart.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
<url>
<loc>https://hub.syn.tools/adhoc-configurations/index.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
<url>
<loc>https://hub.syn.tools/adhoc-configurations/references/parameters.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
<url>
<loc>https://hub.syn.tools/adhoc-configurations/references/patches.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
</urlset>
4 changes: 2 additions & 2 deletions sitemap-alerts-exporter.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://hub.syn.tools/alerts-exporter/index.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
<url>
<loc>https://hub.syn.tools/alerts-exporter/references/parameters.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
</urlset>
6 changes: 3 additions & 3 deletions sitemap-appcat-service-postgresql.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,14 +2,14 @@
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://hub.syn.tools/appcat-service-postgresql/index.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
<url>
<loc>https://hub.syn.tools/appcat-service-postgresql/references/parameters.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
<url>
<loc>https://hub.syn.tools/appcat-service-postgresql/tutorials/installation.html</loc>
<lastmod>2024-10-21T14:22:04.484Z</lastmod>
<lastmod>2024-10-21T15:23:19.509Z</lastmod>
</url>
</urlset>
Loading

0 comments on commit 5b7b3a2

Please sign in to comment.