Red Hat Summit Red Hat Summit지원콘솔개발자평가판 시작연락처

이 콘텐츠는 선택한 언어로 제공되지 않습니다.

Chapter 2. Authenticating Red Hat Edge Manager on Red Hat OpenShift Container Platform

Users can enable secure access to Red Hat Edge Manager by integrating their existing OpenShift identity provider. This guide walks you through labeling your environment and assigning the specific roles required for your team to manage devices, fleets, and organizations.

  • Namespace-to-Organization Mapping: Red Hat Edge Manager uses a 1:1 mapping between OpenShift namespaces and Organizations.
  • Automatic Discovery: The act of labeling a namespace with io.flightctl/instance=<helm_release-name> triggers the automatic discovery and initialization of that namespace as a Red Hat Edge Manager Organization.
  • Multi-Tenancy: You are not limited to a single organization. You can create and manage multiple isolated organizations within a single cluster by applying the same management label to different namespaces.
  • Identity: Each labeled namespace is treated as a distinct organization, allowing you to segregate users, devices, and configurations across your environment.

Prerequisites

  • Red Hat Edge Manager is deployed on Red Hat OpenShift Container Platform via the Software Catalog.
  • Red Hat OpenShift Container Platform users are created via an identity provider (e.g.htpasswd or LDAP).
  • You have cluster-admin access to configure RoleBindings.

Procedure

  1. In the Red Hat OpenShift Container Platform web console, navigate to Helm Releases and record the Helm release name. This value is required for labeling the namespace and configuring user access.

  2. In your terminal, run the following command to label the namespace: 

    $ oc label namespace <namespace> io.flightctl/instance=<helm_release_name>
    Copy to Clipboard Toggle word wrap
    Important

    The label value must match the Helm release name, not the namespace name.

  3. To verify which namespaces are associated with the Helm release name, run the following command: 

    $ oc get namespaces -l io.flightctl/instance=<helm_release_name>
    Copy to Clipboard Toggle word wrap

2.1. Grant user access
링크 복사

Accessing Red Hat Edge Manager resources requires a minimum of two roles: the mandatory view role for organization discovery, plus at least one functional role (e.g., flightctl-admin).

Expand
Table 2.1. Red Hat Edge Manager Roles
RolePurpose

view

Required for organization discovery.

flightctl-admin-<helm_release_name>

Full access to Red Hat Edge Manager resources.

flightctl-operator-<helm_release_name>

CRUD permissions for devices, fleets, resourcesyncs, and repositories.

flightctl-viewer-<helm_release_name>

Read-only access.

Procedure

  • To grant the view role for organization discovery: 

    $ oc adm policy add-role-to-user view <user_name> -n <namespace>
    Copy to Clipboard Toggle word wrap

  • To grant Red Hat Edge Manager administrative permissions: 

    $ oc adm policy add-role-to-user flightctl-admin-<helm_release_name> <user_name> -n <namespace>
    Copy to Clipboard Toggle word wrap

  • To grant permissions for CRUD operations on Red Hat Edge Manager resources: 

    $ oc adm policy add-role-to-user flightctl-operator-<helm_release_name> <user_name> -n <namespace>
    Copy to Clipboard Toggle word wrap

  • To grant Red Hat Edge Manager read-only access: 

    $ oc adm policy add-role-to-user flightctl-viewer-<helm_release_name> <user_name> -n <namespace>
    Copy to Clipboard Toggle word wrap
Note

A User not found warning is expected if the user has not yet logged in. The role binding will activate automatically upon their first authentication.

2.2. User login
링크 복사

You can authenticate with Red Hat Edge Manager using either the flightctl CLI or the UI.

2.2.1. Log in with the CLI
링크 복사

Procedure

  1. Log in to OpenShift: 

    $ oc login
    Copy to Clipboard Toggle word wrap

  2. Log in to Red Hat Edge Manager using the OpenShift token: 

    $ flightctl login https://api.flightctl.apps.example.com -k --token=$(oc whoami -t)
    Copy to Clipboard Toggle word wrap

    Example output

    Auto-selected organization: <uuid> flightctl
Login successful.
    Copy to Clipboard Toggle word wrap

2.2.2. Log in with the UI
링크 복사

Procedure

  1. Navigate to the Red Hat Edge Manager UI.
  2. Click Login with OpenShift.
  3. Authenticate using your OpenShift credentials.

Upon successful authentication, the browser redirects to the Red Hat Edge Manager dashboard.

2.3. Verification
링크 복사

Verify your access and configuration by running the following commands:

Procedure

  1. Check the current organization: 

    $ flightctl config current-organization
    Copy to Clipboard Toggle word wrap

  2. List available organizations: 

    $ flightctl get organizations
    Copy to Clipboard Toggle word wrap

  3. Test access to resources: 

    $ flightctl get devices
$ flightctl get fleets
    Copy to Clipboard Toggle word wrap
Red Hat logoGithubredditYoutubeTwitter

자세한 정보

평가판, 구매 및 판매

커뮤니티

Red Hat 문서 정보

Red Hat을 사용하는 고객은 신뢰할 수 있는 콘텐츠가 포함된 제품과 서비스를 통해 혁신하고 목표를 달성할 수 있습니다. 최신 업데이트를 확인하세요.

보다 포괄적 수용을 위한 오픈 소스 용어 교체

Red Hat은 코드, 문서, 웹 속성에서 문제가 있는 언어를 교체하기 위해 최선을 다하고 있습니다. 자세한 내용은 다음을 참조하세요.Red Hat 블로그.

Red Hat 소개

Red Hat은 기업이 핵심 데이터 센터에서 네트워크 에지에 이르기까지 플랫폼과 환경 전반에서 더 쉽게 작업할 수 있도록 강화된 솔루션을 제공합니다.

Theme

© 2026 Red Hat맨 위로 이동