Convert site to Hugo (#8316)

This commit converts content and layout to use Hugo.
2018-05-05 18:00:51 +02:00
parent 7745f0e0c5
commit 7f3b633aa0
2327 changed files with 10928 additions and 171503 deletions
@@ -0,0 +1,36 @@
+---
+title: Security Considerations
+content_template: templates/task
+---
+
+{{% capture overview %}}
+By default all connections between every provided node are secured via TLS by easyrsa, including the etcd cluster.
+
+This page explains the security considerations of a deployed cluster and production recommendations.
+{{% /capture %}}
+{{% capture prerequisites %}}
+This page assumes you have a working Juju deployed cluster.
+{{% /capture %}}
+
+
+{{% capture steps %}}
+## Implementation
+
+The TLS and easyrsa implementations use the following [layers](https://jujucharms.com/docs/2.2/developer-layers).
+
+[layer-tls-client](https://github.com/juju-solutions/layer-tls-client)
+[layer-easyrsa](https://github.com/juju-solutions/layer-easyrsa)
+
+
+## Limiting ssh access
+
+By default the administrator can ssh to any deployed node in a cluster. You can mass disable ssh access to the cluster nodes by issuing the following command.
+
+    juju model-config proxy-ssh=true
+
+Note: The Juju controller node will still have open ssh access in your cloud, and will be used as a jump host in this case.
+
+Refer to the [model management](https://jujucharms.com/docs/2.2/models) page in the Juju documentation for instructions on how to manage ssh keys.
+{{% /capture %}}
+
+