<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Connect an external service on</title><link>https://docs.shturval.tech/2.13/en/cluster-admin/howto/auth/externalprovider/</link><description>Recent content in Connect an external service on</description><generator>Hugo -- gohugo.io</generator><lastBuildDate>Tue, 06 Oct 2020 08:48:23 +0000</lastBuildDate><atom:link href="https://docs.shturval.tech/2.13/en/cluster-admin/howto/auth/externalprovider/index.xml" rel="self" type="application/rss+xml"/><item><title>Where to start</title><link>https://docs.shturval.tech/2.13/en/cluster-admin/howto/auth/externalprovider/authentication/</link><pubDate>Mon, 16 Nov 2020 13:59:39 +0100</pubDate><guid>https://docs.shturval.tech/2.13/en/cluster-admin/howto/auth/externalprovider/authentication/</guid><description>The Shturval platform is compatible with external authentication services using the OIDC OAuth 2.0 protocol.
To connect an external authentication service, follow the steps for preparing to configure the connection of an external service in the platform.
You can connect external authentication services:
Keycloak; Blitz. When services such as ArgoCD, Grafana are running in the management cluster, then when changing the authentication service, changes in ssc will not be required.</description></item><item><title>Keycloak</title><link>https://docs.shturval.tech/2.13/en/cluster-admin/howto/auth/externalprovider/keycloak/</link><pubDate>Mon, 16 Nov 2020 13:59:39 +0100</pubDate><guid>https://docs.shturval.tech/2.13/en/cluster-admin/howto/auth/externalprovider/keycloak/</guid><description>Once you have completed the steps to prepare for setting up a connection in the platform (the configuration of the external authentication service has been received), you can make changes to the ssc of the Authentication Management Module (shturval-auth) from the command line interface or from the GUI.
It is recommended to connect external authentication services from the command line interface (console).
Connect from the command line interface # Log in to the &amp;ldquo;Shturval&amp;rdquo; platform using the kubeconfig received during platform installation, or you can take it from the Control Plane of the /etc/kubernetes/admin.</description></item><item><title>Blitz</title><link>https://docs.shturval.tech/2.13/en/cluster-admin/howto/auth/externalprovider/blitz/</link><pubDate>Mon, 16 Nov 2020 13:59:39 +0100</pubDate><guid>https://docs.shturval.tech/2.13/en/cluster-admin/howto/auth/externalprovider/blitz/</guid><description>When the steps to prepare for setting up a connection in the platform have been completed (the configuration of the external authentication service has been received):
Log in to the &amp;ldquo;Shturval&amp;rdquo; platform using the kubeconfig received during platform installation, or you can take it from the Control Plane of the /etc/kubernetes/admin.conf platform node.
Get ssc shturval-auth and save the original ssc so you can quickly roll back changes in case of an error:</description></item><item><title>Restoring access when an external service fails</title><link>https://docs.shturval.tech/2.13/en/cluster-admin/howto/auth/externalprovider/troubleshooting/</link><pubDate>Mon, 16 Nov 2020 13:59:39 +0100</pubDate><guid>https://docs.shturval.tech/2.13/en/cluster-admin/howto/auth/externalprovider/troubleshooting/</guid><description>Let&amp;rsquo;s say that in the &amp;ldquo;Shturval&amp;rdquo; platform you have connected an external service for authentication, for example, Keycloak or Blitz. There are situations when a failure may occur on the side of the external authentication service. In this case, it is possible to disable the external authentication service and restore access to the platform for all users.
To ensure that work in the platform is not interrupted if an external service fails, do the following:</description></item></channel></rss>