Bookmark this page

Summary

  • Red Hat OpenShift uses identity providers to validate the identity of users.

  • Configure the OpenID Connect identity provider to use Red Hat Single Sign-On as an identity provider. You can run it on OpenShift by installing the Red Hat Single Sign-On Operator.

  • With ROSA, the HTPasswd identity provider is reserved for the cluster-admin user.

  • You can use the rosa create idp command to configure an additional identity provider.

  • Members of the cluster-admins group have full control of your ROSA cluster.

  • Members of the dedicated-admins group can manage user-created projects.

  • Service accounts enable external applications to access the OpenShift API without the need to borrow a regular user's credentials.

  • A pull secret is used to register your OpenShift clusters with Red Hat. The ROSA cluster creation process automatically performs that registration.

  • The Red Hat OpenShift Cluster Manager can be used to manage OpenShift clusters, review advisor recommendations, and cluster vulnerabilities.

Revision: do120-4.11-db7a8ed