Skip to content

Removed sbcli parts from the Kubernetes authentication page - #204

Merged
noctarius merged 3 commits into
mainfrom
docs/split-k8s-auth-encryption
Aug 31, 2026
Merged

Removed sbcli parts from the Kubernetes authentication page#204
noctarius merged 3 commits into
mainfrom
docs/split-k8s-auth-encryption

Conversation

@boddumanohar

Copy link
Copy Markdown
Member

docs/kubernetes/operations/security/authentication-encryption.md was a copy of the non-Kubernetes page with a CRD section appended, so every {{ cliname }} command on it was duplicated from the plain Linux page. The Kubernetes aspects are now separate from the sbcli aspects.

Changes

docs/kubernetes/operations/security/authentication-encryption.md

  • Removed the three CLI-driven sections: storage-pool add --dhchap, storage-pool add-host / remove-host, and volume connect --host-nqn. They remain in docs/non-kubernetes/operations/security/authentication-encryption.md, which is unchanged.
  • ## Enable Host Authentication and Encryption now carries the dhchap / allowedNodes YAML example instead of the CLI command.
  • Added ## Reconciliation by the Operator for what the operator does in place of the manual steps, and ## Managing Allowed Nodes for the immutability rules.
  • A closing link points to the plain Linux page for the {{ cliname }} flow, matching how multi-tenancy.md and storage-class.md cross-reference.

docs/kubernetes/installation/k8s-storage-plane.md

  • Its anchor pointed at the removed #configuring-dhchap-via-the-storagepool-crd heading and is retargeted to #managing-allowed-nodes, where the allowedNodes reconciliation statement it cites now lives.

Quality gates

./scripts/quality-gate.sh reports no new findings on either file. The 17 syntax errors it reports are pre-existing links into docs/reference/cli/, which is generated from the sbcli repository and not present in the working tree.

🤖 Generated with Claude Code

The Kubernetes page was a copy of the non-Kubernetes page with a CRD
section appended, so every sbctl command on it was duplicated from the
plain Linux page. The three CLI-driven sections are removed and the page
now runs entirely through the StoragePool CR. A closing link points to
the plain Linux page for the sbctl flow.

The anchor in k8s-storage-plane.md pointed at a heading that no longer
exists and is retargeted to the section that carries the allowedNodes
reconciliation statement it cites.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@boddumanohar
boddumanohar requested a review from noctarius August 31, 2026 14:19
boddumanohar and others added 2 commits August 31, 2026 16:22
…ding the openapi spec

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
…uilding the openapi spec

The image mirrors the sbcli dependencies by hand. sbcli has since added
prometheus_fastapi_instrumentator, and ec2-metadata became reachable from
simplyblock_web.app, both of which broke the openapi spec generation.

py-cpuinfo, flask-openapi3 and graypy are not reachable from the app entry
point today, but are required by other simplyblock_web and simplyblock_core
modules, so they are added as well to avoid breaking the build again.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown
Contributor

🤖: Deployment available as https://docstest.simplyblock.io/docs-split-k8s-auth-encryption

@noctarius
noctarius merged commit 94f2ec9 into main Aug 31, 2026
4 checks passed
@noctarius
noctarius deleted the docs/split-k8s-auth-encryption branch August 31, 2026 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants