1
0
mirror of synced 2025-12-21 10:57:10 -05:00

Make images accessible in images/enterprise/management-console (#34652)

Co-authored-by: Rachael Rose Renk <91027132+rachaelrenk@users.noreply.github.com>
This commit is contained in:
Laura Coursen
2023-02-14 08:19:38 -06:00
committed by GitHub
parent d7bf8ed3ef
commit 5b6c781f6f
164 changed files with 148 additions and 251 deletions

View File

@@ -173,11 +173,9 @@ To configure {% data variables.product.prodname_ghe_server %} to use OIDC with a
{% indented_data_reference reusables.actions.enterprise-s3-storage-credential-fields spaces=3 %}
{%- else %}
1. Under "Artifact & Log Storage", select **Amazon S3**, and enter your storage bucket's details:
1. Under "Artifact & Log Storage", select **Amazon S3**, then enter your storage bucket's details:
{% indented_data_reference reusables.actions.enterprise-s3-storage-credential-fields spaces=3 %}
![Radio button for selecting Amazon S3 Storage and fields for S3 configuration](/assets/images/enterprise/management-console/actions-aws-s3-storage.png)
{%- endif %}
{% data reusables.enterprise_management_console.test-storage-button %}
{% data reusables.enterprise_management_console.save-settings %}

View File

@@ -113,9 +113,7 @@ To configure {% data variables.product.prodname_ghe_server %} to use OIDC with a
{% data reusables.actions.enterprise-azure-storage-setup %}
1. Under "Authentication", select **Credentials-based**, and enter your Azure storage account's connection string. For more information on getting the connection string for your storage account, see the [Azure documentation](https://docs.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage?tabs=azure-portal#view-account-access-keys).
{%- else %}
1. Under "Artifact & Log Storage", select **Azure Blob Storage**, and enter your Azure storage account's connection string. For more information on getting the connection string for your storage account, see the [Azure documentation](https://docs.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage?tabs=azure-portal#view-account-access-keys).
![Radio button for selecting Azure Blob Storage and the Connection string field](/assets/images/enterprise/management-console/actions-azure-storage.png)
1. Under "Artifact & Log Storage", select **Azure Blob Storage**, then enter your Azure storage account's connection string. For more information about getting the connection string for your storage account, see the [View account access keys](https://docs.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage?tabs=azure-portal#view-account-access-keys) in the Azure documentation.
{%- endif %}
{% data reusables.enterprise_management_console.test-storage-button %}
{% data reusables.enterprise_management_console.save-settings %}

View File

@@ -61,11 +61,9 @@ To configure {% data variables.product.prodname_ghe_server %} to use OIDC with G
1. Under "Create an identity pool", enter a name for the identity pool, and click **Continue**.
1. Under "Add a provider to pool":
!["Add a provider to pool" screen when setting a new identity pool in Google Cloud Platform](/assets/images/enterprise/management-console/actions-gcp-idp-setup-1.png)
1. For "Select a provider", select **OpenID Connect (OIDC)**.
1. For "Provider name", enter a name for the provider.
1. For "Issuer (URL)", enter the following URL, replacing `HOSTNAME` with the public hostname for {% data variables.location.product_location_enterprise %}:
- For "Select a provider", select **OpenID Connect (OIDC)**.
- For "Provider name", enter a name for the provider.
- For "Issuer (URL)", enter the following URL, replacing `HOSTNAME` with the public hostname for {% data variables.location.product_location_enterprise %}:
```
https://HOSTNAME/_services/token
@@ -76,15 +74,13 @@ To configure {% data variables.product.prodname_ghe_server %} to use OIDC with G
```
https://my-ghes-host.example.com/_services/token
```
1. Under "Audiences", leave **Default audience** selected, but note the identity provider URL, as it is needed later. The identity provider URL is in the format `https://iam.googleapis.com/projects/PROJECT-NUMBER/locations/global/workloadIdentityPools/POOL-NAME/providers/PROVIDER-NAME`.
1. Click **Continue**.
- Under "Audiences", leave **Default audience** selected, but note the identity provider URL, as it is needed later. The identity provider URL is in the format `https://iam.googleapis.com/projects/PROJECT-NUMBER/locations/global/workloadIdentityPools/POOL-NAME/providers/PROVIDER-NAME`.
- Click **Continue**.
1. Under "Configure provider attributes":
!["Configure provider attributes" screen when setting a new identity pool and provider in Google Cloud Platform](/assets/images/enterprise/management-console/actions-gcp-idp-setup-2.png)
1. For the "OIDC 1" mapping, enter `assertion.sub`.
1. Under "Attribute Conditions", click **Add condition**.
1. For "Condition CEL", enter the following condition, replacing `HOSTNAME` with the public hostname for {% data variables.location.product_location_enterprise %}:
- For the "OIDC 1" mapping, enter `assertion.sub`.
- Under "Attribute Conditions", click **Add condition**.
- For "Condition CEL", enter the following condition, replacing `HOSTNAME` with the public hostname for {% data variables.location.product_location_enterprise %}:
```
google.subject == "HOSTNAME"
@@ -101,17 +97,14 @@ To configure {% data variables.product.prodname_ghe_server %} to use OIDC with G
**Note:** The hostname of {% data variables.location.product_location_enterprise %} used here _must not_ include the protocol.
{% endnote %}
1. Click **Save**.
- Click **Save**.
1. After creating the identity pool, at the top of the identity pool's page, click **Grant access**.
!["Grant access to service account" screen when modifying an identity pool in Google Cloud Platform](/assets/images/enterprise/management-console/actions-gcp-idp-setup-3.png)
1. Under "Select service account", select the service account that you created in the previous procedure.
1. Under "Select principals (identities that can access the service account)", select **Only identities matching the filter**.
1. For "Attribute name", select **subject**.
1. For "Attribute value", enter your {% data variables.product.prodname_ghe_server %} hostname, without the protocol. For example, `my-ghes-host.example.com`.
1. Click **Save**.
1. You can dismiss the "Configure your application" dialog, as the configuration file is not needed.
- Under "Select service account", select the service account that you created in the previous procedure.
- Under "Select principals (identities that can access the service account)", select **Only identities matching the filter**.
- For "Attribute name", select **subject**.
- For "Attribute value", enter your {% data variables.product.prodname_ghe_server %} hostname, without the protocol. For example, `my-ghes-host.example.com`.
- Click **Save**.
- You can dismiss the "Configure your application" dialog, as the configuration file is not needed.
### 3. Configure {% data variables.product.prodname_ghe_server %} to connect to Google Cloud Storage using OIDC
@@ -162,8 +155,6 @@ To configure {% data variables.product.prodname_ghe_server %} to use OIDC with G
1. Under "Artifact & Log Storage", select **Google Cloud Storage**, and enter your bucket's details:
{% indented_data_reference reusables.actions.enterprise-gcp-storage-credential-fields spaces=3 %}
![Radio button for selecting Google Cloud Storage and fields for configuration](/assets/images/enterprise/management-console/actions-google-cloud-storage.png)
{%- endif %}
{% data reusables.enterprise_management_console.test-storage-button %}
{% data reusables.enterprise_management_console.save-settings %}

View File

@@ -50,12 +50,8 @@ Before enabling {% data variables.product.prodname_actions %}, make sure you hav
1. Under "Artifact & Log Storage", select **Amazon S3**, and enter your storage bucket's details:
{% indented_data_reference reusables.actions.enterprise-minio-storage-credential-fields spaces=3 %}
![Radio button for selecting Amazon S3 Storage and fields for MinIO configuration](/assets/images/enterprise/management-console/actions-minio-s3-storage.png)
{% endif %}
1. Under "Artifact & Log Storage", select **Force path style**.
![Checkbox to Force path style](/assets/images/enterprise/management-console/actions-minio-force-path-style.png)
{% data reusables.enterprise_management_console.test-storage-button %}
{% data reusables.enterprise_management_console.save-settings %}