15.5. 将 OpenShift Container Platform 配置为使用 SSSD 作为基本远程身份验证服务器

  identityProviders:
  - name: sssd
    challenge: true
    login: true
    mappingMethod: claim
    provider:
      apiVersion: v1
      kind: BasicAuthPasswordIdentityProvider
      url: https://remote-basic.example.com/check_user.php
      ca: /etc/origin/master/ca.crt
      certFile: /etc/origin/master/openshift-master.crt
      keyFile: /etc/origin/master/openshift-master.key

  identityProviders:
  - name: sssd
    challenge: true
    login: true
    mappingMethod: claim
    provider:
      apiVersion: v1
      kind: BasicAuthPasswordIdentityProvider
      url: https://remote-basic.example.com/check_user.php
      ca: /etc/origin/master/ca.crt
      certFile: /etc/origin/master/openshift-master.crt
      keyFile: /etc/origin/master/openshift-master.key

/usr/local/bin/master-restart api api
/usr/local/bin/master-restart controllers controllers

# /usr/local/bin/master-restart api api

# /usr/local/bin/master-restart controllers controllers

oc login https://openshift.example.com:8443

$ oc login https://openshift.example.com:8443

oc get identity -o yaml

$ oc get identity -o yaml