From 9bf1cde5795316b55c3ef8d54c07aa99c479a51c Mon Sep 17 00:00:00 2001 From: Peter Brachwitz Date: Mon, 11 Aug 2025 11:48:07 +0200 Subject: [PATCH 1/3] Link from file-realm to file-based roles doc --- .../users-roles/cluster-or-deployment-auth/file-based.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md b/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md index 6aace3d93a..d4b1a67a86 100644 --- a/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md +++ b/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md @@ -201,7 +201,7 @@ eck: all ``` You can also add file-based authentication users using [Kubernetes basic authentication secrets](https://kubernetes.io/docs/concepts/configuration/secret/#basic-authentication-secret). -A basic authentication secret can optionally contain a [`roles`](#users_roles) entry. It must contain a comma separated list of roles to be associated with the user. The following example illustrates this combination: +A basic authentication secret can optionally contain a [`roles`](#users_roles) entry. It must contain a comma separated list of roles to be associated with the user. To create custom roles that can be referenced in this list refer to [](/deploy-manage/users-roles/cluster-or-deployment-auth/defining-roles#roles-management-file). The following example illustrates this combination: ```yaml apiVersion: v1 From c90c045e75ff192b89d0d310e4ea7628cd61c9ce Mon Sep 17 00:00:00 2001 From: Peter Brachwitz Date: Mon, 11 Aug 2025 11:55:55 +0200 Subject: [PATCH 2/3] Fix link --- .../users-roles/cluster-or-deployment-auth/file-based.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md b/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md index d4b1a67a86..3fe34e0512 100644 --- a/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md +++ b/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md @@ -201,7 +201,7 @@ eck: all ``` You can also add file-based authentication users using [Kubernetes basic authentication secrets](https://kubernetes.io/docs/concepts/configuration/secret/#basic-authentication-secret). -A basic authentication secret can optionally contain a [`roles`](#users_roles) entry. It must contain a comma separated list of roles to be associated with the user. To create custom roles that can be referenced in this list refer to [](/deploy-manage/users-roles/cluster-or-deployment-auth/defining-roles#roles-management-file). The following example illustrates this combination: +A basic authentication secret can optionally contain a [`roles`](#users_roles) entry. It must contain a comma separated list of roles to be associated with the user. To create custom roles that can be referenced in this list refer to [](/deploy-manage/users-roles/cluster-or-deployment-auth/defining-roles.md#roles-management-file). The following example illustrates this combination: ```yaml apiVersion: v1 From 84966e3d664b92a6bb5865290940bf54c8b4da6c Mon Sep 17 00:00:00 2001 From: Peter Brachwitz Date: Mon, 11 Aug 2025 11:58:19 +0200 Subject: [PATCH 3/3] Move to tip box --- .../users-roles/cluster-or-deployment-auth/file-based.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md b/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md index 3fe34e0512..b8eb352b22 100644 --- a/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md +++ b/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md @@ -201,7 +201,7 @@ eck: all ``` You can also add file-based authentication users using [Kubernetes basic authentication secrets](https://kubernetes.io/docs/concepts/configuration/secret/#basic-authentication-secret). -A basic authentication secret can optionally contain a [`roles`](#users_roles) entry. It must contain a comma separated list of roles to be associated with the user. To create custom roles that can be referenced in this list refer to [](/deploy-manage/users-roles/cluster-or-deployment-auth/defining-roles.md#roles-management-file). The following example illustrates this combination: +A basic authentication secret can optionally contain a [`roles`](#users_roles) entry. It must contain a comma separated list of roles to be associated with the user. The following example illustrates this combination: ```yaml apiVersion: v1 @@ -215,6 +215,10 @@ stringData: roles: kibana_admin,ingest_admin # optional, not part of kubernetes.io/basic-auth ``` +::::{tip} +To create custom roles that can be referenced in this list refer to [](/deploy-manage/users-roles/cluster-or-deployment-auth/defining-roles.md#roles-management-file). +:::: + You can make this file available to {{eck}} by adding it as a file realm secret: ```yaml