Red Hat OpenShift Container Platform

Identity providers in Red Hat OpenShift Container Platform

You can configure identity providers by creating a custom resource (CR) that describes the provider and adding it to the cluster. Identity providers enable user authentication in Red Hat OpenShift Container Platform beyond the default kubeadmin user.

Red Hat OpenShift Container Platform usernames containing /, :, and % are not supported.

Supported identity providers
Removing the kubeadmin user
Identity provider parameters
Sample identity provider CR
Manually provisioning a user when using the lookup mapping method
About htpasswd authentication
Creating the htpasswd file
Creating the htpasswd secret
Sample htpasswd CR
Adding an identity provider to your cluster
Updating users for an htpasswd identity provider
Configuring identity providers using the web console
About LDAP authentication
Creating the LDAP secret
Creating a ConfigMap
Sample LDAP custom resource
About OpenID Connect authentication
Supported OpenID Connect providers
Creating the secret
Sample OpenID Connect CRs
About GitHub authentication
Registering a GitHub application
Sample GitHub CR
About GitLab authentication
Sample GitLab custom resource
Google authentication
Sample Google custom resource
About Keystone authentication
Creating the secret
Sample Keystone custom resource
About basic authentication
Sample basic authentication custom resource
Example Apache HTTPD configuration for basic identity providers
Troubleshooting basic authentication
About request header authentication
Sample request header custom resource
Example Apache authentication configuration using request header
Custom proxy configuration
Configuring Apache authentication using the request header
About configuring LDAP sync
Running LDAP sync
Running a group pruning job
Automatically syncing LDAP groups
LDAP group sync examples
LDAP sync configuration specification