knative
/
docs
mirror of https://github.com/knative/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Guard functions (#5448) 

* Documenting guard support for functions

* Documenting guard support for functions

* Documenting guard support for functions

* per namespace setup with guard

Signed-off-by: David Hadas <david.hadas@gmail.com>

* per namespace setup with guard

Signed-off-by: David Hadas <david.hadas@gmail.com>

---------

Signed-off-by: David Hadas <david.hadas@gmail.com>
This commit is contained in:
David Hadas 2023-03-03 22:29:30 +02:00 committed by GitHub
parent bb0038945a
commit a583172c01
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
docs/serving/app-security/security-guard-install.md
View File

@ -91,8 +91,18 @@ To start this tutorial, after installing Knative Serving, run the following proc
network: network:
ingress.class: "kourier.ingress.networking.knative.dev" ingress.class: "kourier.ingress.networking.knative.dev"
EOF EOF
kubectl apply -f https://raw.githubusercontent.com/knative-sandbox/security-guard/release-0.4/config/resources/gateAccount.yaml
``` ```
## Per Namespace Setup
In order to deploy guard protected services in a namespace, provide `guard-gate` with the necessary permissions on each namespace used:
```
kubectl apply -f https://raw.githubusercontent.com/knative-sandbox/security-guard/release-0.4/config/resources/gateAccount.yaml
```
## Additional Production Configuration ## Additional Production Configuration
It is recommended to secure the communication between queue-proxy with the `guard-service` using one of the following methods: It is recommended to secure the communication between queue-proxy with the `guard-service` using one of the following methods: