Short-term authentication for workloads

To use short-term authentication in your applications, you must configure access in your cloud provider, create an Red Hat OpenShift Container Platform service account, and deploy workloads that use this authentication method.

  1. Create a federated identity service account in the Identity and Access Management (IAM) settings for your cloud provider.

  2. Create an Red Hat OpenShift Container Platform service account that can impersonate a service account for your cloud provider.

  3. Configure any workloads related to your application to use the Red Hat OpenShift Container Platform service account.

Environment and user access requirements

To configure short-term authentication for workloads, you must meet specific environment and user access requirements.

To configure this authentication method, you must meet the following requirements:

  • Your cluster must use short-term security credentials.

  • You must have access to the OpenShift CLI (oc) as a user with the cluster-admin role.

  • In your cloud provider console, you must have access as a user with privileges to manage Identity and Access Management (IAM) and federated identity configurations.

← Previous: Creating bound service account tokens outside the pod | ↑ Up: About bound service account tokens | ⌂ Home: Red Hat OpenShift Container Platform | Next: GCP Workload Identity authentication for applications on Google Cloud →