Chapter 3. Configure OpenShift Container Platform

Change the value of the name label to htpasswd_auth and add a new line file: /etc/origin/openshift-passwd in the provider section.

An example identityProviders section with HTPasswdPasswordIdentityProvider would look like the following.

oauthConfig:
  ...
  identityProviders:
  - challenge: true
    login: true
    name: htpasswd_auth provider
    provider:
      apiVersion: v1
      kind: HTPasswdPasswordIdentityProvider
      file: /etc/origin/openshift-passwd

You can use the httpd-tools package to obtain the htpasswd binary that can generate these accounts.

# yum -y install httpd-tools

Create a user account.

# touch /etc/origin/openshift-passwd
# htpasswd -b /etc/origin/openshift-passwd admin redhat

You have created a user, admin, with the password, redhat.

Restart OpenShift before going forward.

# systemctl restart atomic-openshift-master-api atomic-openshift-master-controllers

Give this user account cluster-admin privileges, which allows it to do everything.

$ oc adm policy add-cluster-role-to-user cluster-admin admin

When running oc adm commands, you should run them only from the first master listed in the Ansible host inventory file, by default /etc/ansible/hosts.

You can use this username/password combination to log in via the web console or the command line. To test this, run the following command.

$ oc login -u admin

Delete the default router using the following command.

$ oc delete all -l router=router

Create a new default router.

$ oc adm router --replicas=1 --service-account=router