public_git
/
kubernetes-operator
mirror of https://github.com/jenkinsci/kubernetes-operator.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Improve docs

This commit is contained in:
Jakub Al-Khalili 2019-07-15 15:59:53 +02:00
parent 431484882f
commit f710704aba
1 changed files with 17 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
docs/security.md
View File

@ -52,19 +52,13 @@ $ kubectl create ns jenkins-operator
$ kubectl create ns jenkins $ kubectl create ns jenkins
``` ```
Next, apply the RBAC manifests Next, apply the RBAC manifests for **jenkins-operator** namespace
```bash ```bash
$ kubectl -n jenkins apply -f deploy/role.yaml $ kubectl -n jenkins-operator apply -f deploy/service_account.yaml
$ kubectl -n jenkins -n jenkins-operator apply -f deploy/service_account.yaml $ kubectl -n jenkins-operator apply -f deploy/role_binding.yaml
$ kubectl -n jenkins -n jenkins apply -f deploy/role_binding.yaml
``` ```
Then, you must create operator pod by: Create file role_binding_jenkins.yaml in `deploy` folder:
```bash
$ kubectl -n jenkins -n jenkins-operator apply -f deploy/operator.yaml
```
To combine pods, you must modify RoleBindings. You can use this example YAML to bind:
```yaml ```yaml
kind: RoleBinding kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
@ -81,6 +75,18 @@ roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
``` ```
Then, apply RBAC rules for **jenkins** namespace
```bash
$ kubectl -n jenkins apply -f deploy/role.yaml
$ kubectl -n jenkins apply -f role_binding_jenkins.yaml
```
Finally, you must create operator pod by:
```bash
$ kubectl -n jenkins -n jenkins-operator apply -f deploy/operator.yaml
```
## Report a Security Vulnerability ## Report a Security Vulnerability
If you find a vulnerability or any misconfiguration in Jenkins, please report it in the [issues](https://github.com/jenkinsci/kubernetes-operator/issues). If you find a vulnerability or any misconfiguration in Jenkins, please report it in the [issues](https://github.com/jenkinsci/kubernetes-operator/issues).