3.5. 红帽单点登录


MTA 将身份验证和授权委托给 MTA operator 管理的 Red Hat Single Sign-On (RHSSO) 实例。除了控制受管 RHSSO 实例的完整生命周期外,MTA operator 还管理一个专用的配置,其中包含 MTA 所需的所有角色和权限。

如果在 MTA 管理的 RHSSO 实例中需要高级配置,如 为 User Federation 添加一个供应商集成身份提供程序,用户可以通过 mta-ui 路由中的 /auth/admin 子路径登录到 RHSSO 管理控制台。用于访问 MTA 管理的 RHSSO 实例的 admin 凭据可以从安装用户界面的命名空间中提供的 credential-mta-rhsso secret 中检索。

通过在管理 MTA 实例的 Tackle CR 中将 rhsso_external_access 参数设置为 True 来创建 MTA 受管 RHSSO 实例的专用路由。

如需更多信息,请参阅 Red Hat Single Sign-On 功能和概念

3.5.1. 角色和权限

下表包含 MTA 查找受管 RHSSO 实例的角色和权限(范围):

Expand

tackle-admin

资源名称

Verbs

 

附加组件

delete
get
post
put

 

adoptionplans

post

 

应用程序

delete
get
post
put

 

applications.facts

delete
get
post
put

 

applications.tags

delete
get
post
put

 

applications.bucket

delete
get
post
put

 

assessments

delete
get
patch
post
put

 

businessservices

delete
get
post
put

 

dependencies

delete
get
post
put

 

identities

delete
get
post
put

 

imports

delete
get
post
put

 

jobfunctions

delete
get
post
put

 

proxies

delete
get
post
put

 

reviews

delete
get
post
put

 

设置

delete
get
post
put

 

stakeholdergroups

delete
get
post
put

 

stakeholders

delete
get
post
put

 

tags

delete
get
post
put

 

tagtypes

delete
get
post
put

 

tasks

delete
get
post
put

 

tasks.bucket

delete
get
post
put

 

tickets

delete
get
post
put

 

trackers

delete
get
post
put

 

缓存

delete
get

 

files

delete
get
post
put

 

rulebundles

delete
get
post
put

tackle-architect

资源名称

Verbs

 

附加组件

delete
get
post
put

 

applications.bucket

delete
get
post
put

 

adoptionplans

post

 

应用程序

delete
get
post
put

 

applications.facts

delete
get
post
put

 

applications.tags

delete
get
post
put

 

assessments

delete
get
patch
post
put

 

businessservices

delete
get
post
put

 

dependencies

delete
get
post
put

 

identities

get

 

imports

delete
get
post
put

 

jobfunctions

delete
get
post
put

 

proxies

get

 

reviews

delete
get
post
put

 

设置

get

 

stakeholdergroups

delete
get
post
put

 

stakeholders

delete
get
post
put

 

tags

delete
get
post
put

 

tagtypes

delete
get
post
put

 

tasks

delete
get
post
put

 

tasks.bucket

delete
get
post
put

 

trackers

get

 

tickets

delete
get
post
put

 

缓存

get

 

files

delete
get
post
put

 

rulebundles

delete
get
post
put

tackle-migrator

资源名称

Verbs

 

附加组件

get

 

adoptionplans

post

 

应用程序

get

 

applications.facts

get

 

applications.tags

get

 

applications.bucket

get

 

assessments

get
post

 

businessservices

get

 

dependencies

delete
get
post
put

 

identities

get

 

imports

get

 

jobfunctions

get

 

proxies

get

 

reviews

get
post
put

 

设置

get

 

stakeholdergroups

get

 

stakeholders

get

 

tags

get

 

tagtypes

get

 

tasks

delete
get
post
put

 

tasks.bucket

delete
get
post
put

 

tackers

get

 

tickets

get

 

缓存

get

 

files

get

 

rulebundles

get

Red Hat logoGithubredditYoutubeTwitter

学习

尝试、购买和销售

社区

关于红帽文档

通过我们的产品和服务,以及可以信赖的内容,帮助红帽用户创新并实现他们的目标。 了解我们当前的更新.

让开源更具包容性

红帽致力于替换我们的代码、文档和 Web 属性中存在问题的语言。欲了解更多详情,请参阅红帽博客.

關於紅帽

我们提供强化的解决方案,使企业能够更轻松地跨平台和环境(从核心数据中心到网络边缘)工作。

Theme

© 2026 Red Hat
返回顶部