Add Users
After installing Kloudfuse, add users and manage their credentials.
The user appears in the Admin > Users tab after they log in for the first time. |
Follow these steps:
-
Connect to your Kloudfuse kubernetes cluster.
-
Drop the content of the
users.txt
file.If it exists, the file is in
htpassword
format.rm -f users.txt
-
Retrieve the
users.txt
file in thekfuse-auth-users
secret, and save it locally. Otherwise, create ausers.txt
file.kubectl get secret -n kfuse kfuse-auth-users -o json | jq -r '.data."users.txt"' | base64 -d > users.txt
-
(Optional) If changing the password of a user, then remove existing entry for that user from
users.txt
file. -
Create or change the user’s password.
This example is for user
testuser
. For an admin user, useadmin
.htpasswd -Bn testuser >> users.txt
-
Ensure that the
users.txt
file does not have empty lines between users.sed -i '' '/^$/d' users.txt
-
If the
users.txt
file does not end with a new line, ensure that it does by running the following command.echo "" >> users.txt
-
Encode the
users.txt
file usingbase64
format.cat users.txt | base64
-
Use the following command to edit the existing
kfuse-auth-users
secret.kubectl edit secret kfuse-auth-users
-
Otherwise, create a new Kubernetes secret,
kfuse-auth-users
.kubectl apply -f kfuse-auth-users
-
Use the output of
cat users.txt| base64
as the value ofusers.txt
entry in the secret.apiVersion: v1 data: users.txt: |- <base64-encoded-value> kind: Secret metadata: name: kfuse-auth-users type: Opaque
-
For fresh installations, update your
custom-values.yaml
to point to thekfuse-auth-users
secret.kfuse-auth: oauth2-proxy: htpasswdFile: existingSecret: kfuse-auth-users
Skip this step if adding a new user or updating the password for an existing user.
-
Restart
kfuse-auth
deployment.kubectl -n kfuse rollout restart deployment kfuse-auth
-
After you log in with the new user/password credentials for the first time, these appear in the Admin > Users interface.