-
Notifications
You must be signed in to change notification settings - Fork 159
added sections and references in credentials handling in ECK #2366
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from 5 commits
a572aa8
9b7bb06
9527680
3e57e51
e37eaf8
bd8595c
20c8bf6
215c423
6ce89d7
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -72,3 +72,31 @@ kubectl delete secret -l eck.k8s.elastic.co/credentials=true | |
::::{warning} | ||
This command regenerates auto-generated credentials of **all** {{stack}} applications in the namespace. | ||
:::: | ||
|
||
## Creating custom users | ||
|
||
{{eck}} provides functionality to facilitate custom user creation through various authentication realms. You can create users using the native realm, file realm, or external authentication methods. | ||
|
||
### Native realm | ||
|
||
You can create custom users in the {{es}} native realm using {{es}} user management APIs or {{kib}}. | ||
|
||
Refer to [Native user authentication](/deploy-manage/users-roles/cluster-or-deployment-auth/native.md) for more details. | ||
|
||
### File realm | ||
|
||
Custom users can also be created by providing the desired file realm content or a username and password in Kubernetes secrets, referenced in the {{es}} resource. | ||
|
||
For more information, refer to [File-based user authentication](/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md). | ||
|
||
### External authentication realms | ||
|
||
You can also configure external authentication realms such as LDAP, OpenID Connect, or SAML in your ECK deployments by providing the appropriate {{es}} or {{kib}} configuration settings and any required [certificates or configuration files](/deploy-manage/deploy/cloud-on-k8s/custom-configuration-files-plugins.md). | ||
|
||
For more information, refer to [External authentication](/deploy-manage/users-roles/cluster-or-deployment-auth/external-authentication.md). | ||
|
||
## Creating custom roles | ||
|
||
Roles can be specified using the Role management API, or the Role management UI in {{kib}}. Additionally, file-based role management can be achieved by referencing Kubernetes secrets containing the roles specification. | ||
|
||
|
||
Refer to [Managing custom roles](/deploy-manage/users-roles/cluster-or-deployment-auth/defining-roles.md#managing-custom-roles) for details and examples. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
For the same reasons I would move this one before
Native realm
.