VSHN Knowledge Base
VSHN
Main website Handbook Knowledge Base Products Legal Portal Help APPUiO Cloud Docs Project Syn K8up

APPUiO Cloud for System Engineers

    • About
      • Glossary
      • DNS naming scheme
    • Getting started
      • Connect to APPUiO Control API
    • Architecture
      • Identity data model
      • Authentication on OpenShift clusters
      • Namespace ownership
      • Metering of resource usage
      • Metrics of interest
      • Resource Usage Reporting
        • [Deprecated] Data model and data flow for Billing
      • Invitations
      • Usage profiles
      • System
        • System context
        • System idea
        • System idea: Graphical user interface
        • System idea: Adapters
        • Data model
      • Control API
        • Organization
        • User
        • Team
        • Zone
        • BillingEntity
        • Invitation
        • UsageProfile
        • Adapters
          • Organization Adapter
          • BillingEntity Adapter
          • BillingEntity Adapter at VSHN
    • Installation
      • Install Keycloak
      • Setup RBAC
      • Install a cluster for APPUiO Cloud
      • Add a cluster to APPUiO Cloud
      • Examples for VSHN
        • Activate APPUiO Zone
        • Activate Global Environment
        • Activate AppCat Object Storage On APPUiO Zone
        • Activate AppCat Exoscale DBaaS On APPUiO Zone
    • Security and compliance
      • Kyverno policies used by APPUiO Cloud
      • Configure role mappings for Keycloak brokering
      • Configure role-based access control for brokered users
      • Setup RBAC
    • Authentication and authorization
      • Administrator access to the APPUiO IdP
      • Add Keycloak Brokering
      • Configure role mappings for Keycloak brokering
      • Configure role-based access control for brokered users
      • Setup RBAC
    • Networking
      • DNS naming scheme
    • Organizations and Namespaces
      • Update resource limits
      • Override Namespace Quota
      • Remove an organization
    • Logging
      • Measure Log Ingestion by Organization
    • Requirements
      • Document requirements
      • Functional
        • Portal
        • Billing and Reporting
        • Retention time of metrics used for invoicing
        • Sampling interval collecting metering data
        • Sampling interval in the intermediate metering storage
        • User namespaces belong to an organization
      • Performance
        • Time to create Namespaces
        • Namespace quota per Zone
        • Resource limit per Namespace
      • Reliability
        • Namespace validation resilience
        • Organization list resilience
      • Usability
        • DNS Naming scheme
        • Arbitrary Namespace name
        • Arbitrary user name
        • Arbitrary organization name
        • Metrics scope for invoicing
        • Creating namespaces with ServiceAccount tokens
        • Creating OpenShift projects
        • Namespaces are owned by organizations
        • Organizations show a human-readable Billing Entity reference
      • Security
        • Impersonating cluster-admin
      • Portability
        • Foreign components as Adapters
    • Decisions
      • Document decisions
      • Keycloak as IdP
      • IdP Group membership Mapping
      • Policy Engine
      • Resource Generator
      • User object names in the OpenShift cluster
      • User name choice on sign-up
      • User name stability
      • Keycloak Usernames for Brokered Identities
      • APPUiO Control API
      • Unit prefixes
      • Access metering data
      • RHOL EFK Logging Stack
      • No off-the-shelf ETL processor for metering and billing
      • BillingEntity as Virtual Resource
      • Keycloak Kubernetes API Integration
      • Deprecated: Keycloak Organization Adapter
      • Omit creation of default RBAC rules on select organization namespaces
      • Control API interaction with Zones
      • Control API interface to Odoo 16
      • Keycloak Zone Group sync
      • APPUiO Cloud outside office hours maintenance
      • Scheduling, Execution and Monitoring of APPUiO Billing ETL process
APPUiO Cloud for System Engineers master
  • APPUiO Cloud for System Engineers
    • master
  • APPUiO Managed Kubernetes Services
    • master
  • APPUiO Managed OpenShift 4
    • master
  • VSHN Application Catalog
    • master
  • VSHN AppOps and AppFlow for VSHNeers
    • master
  • VSHN Corporate Technology
    • master
  • VSHN Knowledge Base
    • master
  • VSHN Managed Service
    • master
  • APPUiO Cloud for System Engineers
  • Architecture
  • Authentication on OpenShift clusters
Edit this Page

Authentication on OpenShift clusters

APPUiO Cloud users can authenticate on each APPUiO Zone using their user configured in Keycloak.

Authentication is configured in OpenShift using the OpenShift OpenID connect IdP.

Identity data model Namespace ownership

Copyright © VSHN 2023 – All Rights Reserved. Privacy Policy, Imprint, and Contact.