Chapter 1. Red Hat OpenShift Cluster Manager

Procedure

1. Click the Add user button.
2. Enter the ID of the user you want to grant cluster admin access.
3. Select the appropriate group for your user. Either dedicated-admins for {product-short-name} clusters, or cluster-admins for clusters.

Procedure

1. Click the Grant role button.
2. Enter the Red Hat account login for the user that you wish to grant a role on the cluster.

3. Select the role from following options:

   • Cluster editor allows users or groups to manage or configure the cluster.
   • Cluster viewer allows users or groups to view cluster details only.
   • Identity provider editor allows users or groups to manage and configure the identity providers.
   • Machine pool editor allows users or groups to manage and configure the machine pools.
4. Click the Grant role button on the dialog box.

Procedure

1. From the Networking tab in OpenShift Cluster Manager, click the Additional application router toggle to enable the Ingress. There are two options you can add to the additional router:

   1. Make router private: This checkbox allows you to control cluster privacy. By default, your Ingress router is publicly exposed and allows anyone access. You can limit access to applications or websites you run on your cluster by selecting this checkbox. For example, if you only want internal employees to access this cluster, then using this option requires a private connection, such as a virtual private network (VPN) or virtual private cloud (VPC) peering connection.

   2. Label match for additional router: This field provides a way to target the specific route you want exposed in this additional Ingress router. By default, the router exposes all routes. If you leave this field blank, these routes stay exposed.

      A commonly used setup has a private default router, which means any applications deployed require a VPN or VPC peering to access. You can create an additional public router with a label match of route=external. Then, if you add the route=external label to additional routes, the additional router matches this label and exposes it for public use.

2. Click Change settings to confirm that you want to add the network Ingress.