https://wiki.pedromussato.com/index.php?action=history&feed=atom&title=RedHat_OpenShift 2026-04-12T14:39:33Z Revision history for this page on the wiki MediaWiki 1.42.3 https://wiki.pedromussato.com/index.php?title=RedHat_OpenShift&diff=146&oldid=prev 2024-10-15T17:29:19Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 17:29, 15 October 2024</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l3">Line 3:</td> <td colspan="2" class="diff-lineno">Line 3:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== User types ===</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== User types ===</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* <del style="font-weight: bold; text-decoration: none;">regular</del>: <del style="font-weight: bold; text-decoration: none;">regular </del>users are normal users such as developers and <del style="font-weight: bold; text-decoration: none;">people who manages </del>the <del style="font-weight: bold; text-decoration: none;">cluster </del>(e.g. developer)</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <ins style="font-weight: bold; text-decoration: none;">'''Regular users'''</ins>: <ins style="font-weight: bold; text-decoration: none;">Regular </ins>users are normal users such as developers and <ins style="font-weight: bold; text-decoration: none;">cluster administrators. They interact with </ins>the <ins style="font-weight: bold; text-decoration: none;">OpenShift environment through their user accounts and have specific permissions based on their roles </ins>(e.g.<ins style="font-weight: bold; text-decoration: none;">, </ins>developer<ins style="font-weight: bold; text-decoration: none;">, admin</ins>)<ins style="font-weight: bold; text-decoration: none;">.</ins></div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* <del style="font-weight: bold; text-decoration: none;">system</del>: system <del style="font-weight: bold; text-decoration: none;">users are users that are </del>created on each node <del style="font-weight: bold; text-decoration: none;">and have the prefix </del>system: (e.g. system:admin, system:master)</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <ins style="font-weight: bold; text-decoration: none;">'''System users'''</ins>: <ins style="font-weight: bold; text-decoration: none;">These are internal </ins>system <ins style="font-weight: bold; text-decoration: none;">accounts </ins>created on each node<ins style="font-weight: bold; text-decoration: none;">, typically prefixed with &lt;code&gt;</ins>system:<ins style="font-weight: bold; text-decoration: none;">&lt;/code&gt; </ins>(e.g.<ins style="font-weight: bold; text-decoration: none;">, &lt;code&gt;</ins>system:admin<ins style="font-weight: bold; text-decoration: none;">&lt;/code&gt;</ins>, <ins style="font-weight: bold; text-decoration: none;">&lt;code&gt;</ins>system:master<ins style="font-weight: bold; text-decoration: none;">&lt;/code&gt;</ins>)<ins style="font-weight: bold; text-decoration: none;">. These accounts are used by OpenShift for essential system-level tasks and operations.</ins></div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* <del style="font-weight: bold; text-decoration: none;">service</del>: <del style="font-weight: bold; text-decoration: none;">service users are users that </del>are created to allow <del style="font-weight: bold; text-decoration: none;">the </del>communication between services <del style="font-weight: bold; text-decoration: none;"> </del>with <del style="font-weight: bold; text-decoration: none;">the prefix </del>system:serviceaccount (e.g. system:serviceaccount:<del style="font-weight: bold; text-decoration: none;">user</del>)</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <ins style="font-weight: bold; text-decoration: none;">'''Service users'''</ins>: <ins style="font-weight: bold; text-decoration: none;">Service accounts </ins>are created to allow communication between services<ins style="font-weight: bold; text-decoration: none;">. They are prefixed </ins>with <ins style="font-weight: bold; text-decoration: none;">&lt;code&gt;</ins>system:serviceaccount<ins style="font-weight: bold; text-decoration: none;">:&lt;/code&gt; and are used to enable secure interactions between components </ins>(e.g.<ins style="font-weight: bold; text-decoration: none;">, &lt;code&gt;</ins>system:serviceaccount:<ins style="font-weight: bold; text-decoration: none;">myproject:myservice&lt;/code&gt;</ins>)<ins style="font-weight: bold; text-decoration: none;">.</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Oauth Server ===</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Oauth Server ===</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l11">Line 11:</td> <td colspan="2" class="diff-lineno">Line 11:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==== Modes ====</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==== Modes ====</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* Allow all: <del style="font-weight: bold; text-decoration: none;">all </del>user <del style="font-weight: bold; text-decoration: none;">is allowed </del>with any password, password <del style="font-weight: bold; text-decoration: none;">is </del>not validated<del style="font-weight: bold; text-decoration: none;">, if the </del>user does not <del style="font-weight: bold; text-decoration: none;">exists the server </del>will automatically create <del style="font-weight: bold; text-decoration: none;">one</del>.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <ins style="font-weight: bold; text-decoration: none;">'''</ins>Allow all<ins style="font-weight: bold; text-decoration: none;">'''</ins>: <ins style="font-weight: bold; text-decoration: none;">In this mode, any </ins>user <ins style="font-weight: bold; text-decoration: none;">can log in </ins>with any password, <ins style="font-weight: bold; text-decoration: none;">and the </ins>password <ins style="font-weight: bold; text-decoration: none;">will </ins>not <ins style="font-weight: bold; text-decoration: none;">be </ins>validated<ins style="font-weight: bold; text-decoration: none;">. If a </ins>user does not <ins style="font-weight: bold; text-decoration: none;">already exist, OpenShift </ins>will automatically create <ins style="font-weight: bold; text-decoration: none;">the user account upon login. This is useful for development or testing environments but not secure for production</ins>.</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* Deny all: by default <del style="font-weight: bold; text-decoration: none;">will deny all users, to create a user </del>an administrator <del style="font-weight: bold; text-decoration: none;">will create an account and actvate it so it </del>can be used.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <ins style="font-weight: bold; text-decoration: none;">'''</ins>Deny all<ins style="font-weight: bold; text-decoration: none;">'''</ins>: <ins style="font-weight: bold; text-decoration: none;">This mode denies all login attempts </ins>by default<ins style="font-weight: bold; text-decoration: none;">. User accounts must be created and activated by </ins>an administrator <ins style="font-weight: bold; text-decoration: none;">before they </ins>can be used<ins style="font-weight: bold; text-decoration: none;">. This is a more secure setup for production environments</ins>.</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">This </del>configuration <del style="font-weight: bold; text-decoration: none;">can be </del>managed <del style="font-weight: bold; text-decoration: none;">at </del>/etc/openshift/master/master-config.yaml</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">The </ins>configuration <ins style="font-weight: bold; text-decoration: none;">for these settings is </ins>managed <ins style="font-weight: bold; text-decoration: none;">in the &lt;code&gt;</ins>/etc/openshift/master/master-config.yaml<ins style="font-weight: bold; text-decoration: none;">&lt;/code&gt; file.</ins></div></td></tr> </table>

413vhcu1lq0463ob https://wiki.pedromussato.com/index.php?title=RedHat_OpenShift&diff=145&oldid=prev 2024-10-15T17:27:02Z

<p>Created page with &quot;== Users == === User types === * regular: regular users are normal users such as developers and people who manages the cluster (e.g. developer) * system: system users are users that are created on each node and have the prefix system: (e.g. system:admin, system:master) * service: service users are users that are created to allow the communication between services with the prefix system:serviceaccount (e.g. system:serviceaccount:user) === Oauth Server === ==== Modes...&quot;</p> <p><b>New page</b></p><div>== Users ==<br /> <br /> === User types ===<br /> <br /> * regular: regular users are normal users such as developers and people who manages the cluster (e.g. developer)<br /> * system: system users are users that are created on each node and have the prefix system: (e.g. system:admin, system:master)<br /> * service: service users are users that are created to allow the communication between services with the prefix system:serviceaccount (e.g. system:serviceaccount:user)<br /> <br /> === Oauth Server ===<br /> <br /> ==== Modes ====<br /> <br /> * Allow all: all user is allowed with any password, password is not validated, if the user does not exists the server will automatically create one.<br /> * Deny all: by default will deny all users, to create a user an administrator will create an account and actvate it so it can be used.<br /> <br /> This configuration can be managed at /etc/openshift/master/master-config.yaml</div>

413vhcu1lq0463ob