Daniel Hiltgen 3410d56fdd Lockdown CA (CFSSL) with mutual TLS ...

This change re-wires the way we have CFSSL hooked up so
that it requires mutual TLS to access the service.

Instead of using command line arguments, and thus relying on environment
variables from linking, this change also switches to registering the
CAs via KV store entries.

The current CFSSL implementation does not support mutual TLS natively,
so I've leveraged socat and a proxy container (much like we do for
docker) in the interest of expediency.  (so under the covers it's still
a link between cfss and the proxy.) Once upstream supports mutual TLS
(or if we decide to fork/patch it) we can drop the proxy and eliminate
all the links.

2016-11-01 17:15:24 -07:00

certs.md

Add docs explaining how to wire up certs by hand

2015-08-12 17:28:59 -07:00

dashboard.png

First draft of beta install

2016-11-01 17:15:10 -07:00

install_upgrade_spec.md

Fix up the integration tests for volumes

2016-11-01 17:15:02 -07:00

install-beta.md

Lockdown CA (CFSSL) with mutual TLS

2016-11-01 17:15:24 -07:00

kv_store.md

Show how to access the KV store

2016-11-01 17:15:10 -07:00

login.png

First draft of beta install

2016-11-01 17:15:10 -07:00

networking.md

Cross-host networking docs

2016-11-01 17:15:10 -07:00

nodes.png

First draft of beta install

2016-11-01 17:15:10 -07:00

orca_components.png

Switch to new cert model

2016-11-01 17:14:14 -07:00

orca_components.svg

Switch to new cert model

2016-11-01 17:14:14 -07:00

profiling.md

Add support for pprof

2016-11-01 17:14:14 -07:00

quickstart.md

Lockdown CA (CFSSL) with mutual TLS

2016-11-01 17:15:24 -07:00

support.md

Revamp support dump to be synchronous

2016-11-01 17:14:15 -07:00

user_certs.md

Add docs explaining how to wire up certs by hand

2015-08-12 17:28:59 -07:00

Description

Репозиторий с исходным кодом для документации Docker

Apache-2.0 939 MiB

Languages

Markdown 94.9%

HTML 2.4%

JavaScript 0.8%

CSS 0.7%

Go 0.7%

Other 0.2%