starlingx/docs
Code Issues Proposed changes

Merge "Fix code block in the new Security:UserManagement section (dsR10, r10)"

Browse Source
This commit is contained in:
Zuul 2025-01-17 14:44:55 +00:00 committed by Gerrit Code Review
commit 5699adcbc8
3 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/source/security/kubernetes/create-end-users-359693b84854.rst
View File

@ -132,7 +132,7 @@ In the following example, creating end users consists of:
.. code-block::
$ sudo sed -i '$ a\\\*;\*;%ABC-EndUsers;Al0000-2400;denyssh' /etc/security/group.conf
$ sudo sed -i '$ a\*;*;%ABC-EndUsers;Al0000-2400;denyssh' /etc/security/group.conf
#. Create a kubernetes namespace for the end user group.

4
doc/source/security/kubernetes/create-first-system-administrator-1775e1b20941.rst
View File

@ -61,10 +61,10 @@ it can create subsequent system administrators and end users.
.. code-block::
# Execute this line only once, on each host
$ sudo sed -i '1i auth required `pam_group.so <http://pam_group.so>`__ use_first_pass}' /etc/pam.d/common-auth
$ sudo sed -i '1i auth required pam_group.so use_first_pass' /etc/pam.d/common-auth
# Execute this line for each LDAP group being mapped to 1 or more local Linux groups, on each host
$ sudo sed -i '$ a\\\*;\*;%Level1SystemAdmin;Al0000-2400;sys_protected,root,sudo' /etc/security/group.conf
$ sudo sed -i '$ a\*;*;%Level1SystemAdmin;Al0000-2400;sys_protected,root,sudo' /etc/security/group.conf
#. Add full kubernetes authorization privileges to the ``Level1SystemAdmin``
|LDAP| group members.

5
doc/source/security/kubernetes/create-other-system-administrators-97b99bb94430.rst
View File

@ -89,7 +89,8 @@ In the following example, creating other system administrators consists of:
.. code-block:: none
$ sudo sed -i '$a\\\*;\*;%Level2SystemAdmin;Al0000-2400;sys_protected,root' /etc/security/group.conf
$ sudo sed -i '$ a\*;*;%Level2SystemAdmin;Al0000-2400;sys_protected,root' /etc/security/group.conf
#. Add restricted kubernetes authorization privileges to the
``Level2SystemAdmin`` |LDAP| group members.
@ -153,7 +154,7 @@ In the following example, creating other system administrators consists of:
.. code-block:: none
$ sudo sed -i '$ a\\\*;\*;%Level3SystemAdmin;Al0000-2400;users' /etc/security/group.conf
$ sudo sed -i '$ a\*;*;%Level3SystemAdmin;Al0000-2400;users' /etc/security/group.conf
#. Add 'reader' Kubernetes authorization privileges to the ``Level3SystemAdmin``
|LDAP| group members.