Managing users and credentials

Follow the procedures in this section to manage Tackle users and passwords using the Keycloak admin console.

Accessing the Keycloak admin console

A Keycloak admin user is created when Tackle is installed. The admin username and password are needed to log in to the Keycloak admin console. The credentials are stored in the tackle-keycloak secret.

Prerequisites

  • Cluster-admin privileges.

Procedure

  1. Run the following command to obtain the admin credentials:
$ kubectl get secret tackle-keycloak -o go-template='{{range $k,$v := .data}}{{printf "%s: " $k}}{{if not $v}}{{$v}}{{else}}{{$v | base64decode}}{{end}}{{"\n"}}{{end}}'
Example output
ADMIN_PASSWORD: <password>
ADMIN_USERNAME: admin
  1. Launch a browser and navigate to https://<www.example.com>/auth and specify the Tackle cluster URL.
  2. Log in to the Keycloak admin console with the admin user name and password.

Changing the default password

Follow the steps below to change the default password of the tackle user.

Prerequisites

  • Cluster-admin privileges
  • Keycloak admin user name and password.

Procedure

  1. Log in to the Keycloak admin console at https://<www.example.com>/auth and specify the Tackle cluster URL.
  2. Locate the tackle user in the Tackle realm. See Searching for users in the Keycloak documentation.
  3. Update the tackle user’s password. See User Credentials.
  4. Log out of the Keycloak admin console.
  5. Log in to the Tackle web console as the tackle user to verify the new password.

Adding users

Follow the steps below to add users by using the Keycloak admin console.

Prerequisites

  • Cluster-admin privileges
  • Keycloak admin user name and password.

Procedure

  1. Log in to the Keycloak admin console at https://<www.example.com>/auth and specify the Tackle cluster URL. Create a new user in the Tackle realm. See Creating a new user in the Keycloak documentation.
  2. Create a password for the new user. See Creating a password for the user.

Optional: Set attributes and permissions for the new user. See User profile.

Additional resources for Keycloak

Source