Add Users

After installing Kloudfuse, add users and manage their credentials.

Follow these steps:

1. Connect to your Kloudfuse Kubernetes cluster.

2. Drop the content of the users.txt file.

If it exists, the file is in htpassword format.

    rm -f users.txt
    ```

03. Retrieve the `users.txt` file in the `kfuse-auth-users` secret, and save it locally. Otherwise, create a `users.txt` file.

```console
    kubectl get secret -n kfuse kfuse-auth-users -o json | jq -r '.data."users.txt"' | base64 -d > users.txt
    ```

04. (Optional) If changing the password of a user, then remove the existing entry for that user from `users.txt` file.

05. Create or change the user’s password.

This example is for user `testuser`. For an admin user, use `admin`.

```console
    htpasswd -Bn testuser >> users.txt
    ```

06. Ensure that the `users.txt` file does not have empty lines between users.

```console
    sed -i '' '/^$/d' users.txt
    ```

07. If the `users.txt` file does not end with a new line, ensure that it does by running the following command.

```console
    echo "" >> users.txt
    ```

08. Encode the `users.txt` file using `base64` format.

```console
    cat users.txt | base64
    ```

09. Use the following command to edit the existing `kfuse-auth-users` secret.

```console
    kubectl edit secret kfuse-auth-users
    ```

10. Otherwise, create a new Kubernetes secret, `kfuse-auth-users`.

```bash
    kubectl apply -f kfuse-auth-users
    ```

11. Use the output of `cat users.txt| base64` as the value of `users.txt` entry in the secret.

```yaml
    apiVersion: v1
    data:
      users.txt: |-
        <base64-encoded-value>
    kind: Secret
    metadata:
      name: kfuse-auth-users
    type: Opaque
    ```

12. For fresh installations, update your `custom-values.yaml` to point to the `kfuse-auth-users` secret.

```yaml
    kfuse-auth:
      oauth2-proxy:
        htpasswdFile:
          existingSecret: kfuse-auth-users
    ```

13. Restart `kfuse-auth` deployment.

```console
    kubectl -n kfuse rollout restart deployment kfuse-auth
    ```

14. After you log in with the new user/password credentials for the first time, these appear in the **Admin > Users** interface.