Create local users

After installing Kloudfuse, add users and manage their credentials.

Follow these steps:

1. Connect to your Kloudfuse kubernetes cluster.

2. Drop the content of the users.txt file.

If it exists, the file is in htpassword format.

rm -f users.txt

3. Retrieve the users.txt file in the kfuse-auth-users secret, and save it locally. Otherwise, create a users.txt file.

kubectl get secret -n kfuse kfuse-auth-users -o json | jq -r '.data."users.txt"' | base64 -d > users.txt

4. (Optional) If changing the password of a user, then remove existing entry for that user from users.txt file.

5. Create or change the user’s password.

This example is for user testuser. For an admin user, use admin.

htpasswd -Bn testuser >> users.txt

1. Ensure that the users.txt file does not have empty lines between users.

sed -i '' '/^$/d' users.txt

2. If the users.txt file does not end with a new line, ensure that it does by running the following command.

echo "" >> users.txt

3. Encode the users.txt file using base64 format.

cat users.txt | base64

4. Use the following command to edit the existing kfuse-auth-users secret.

kubectl edit secret kfuse-auth-users

5. Otherwise, create a new Kubernetes secret, kfuse-auth-users.

kubectl apply -f kfuse-auth-users

6. Use the output of cat users.txt| base64 as the value of users.txt entry in the secret.

apiVersion: v1
data:
     users.txt: |-
       <base64-encoded-value>
kind: Secret
metadata:
     name: kfuse-auth-users
type: Opaque

7. For fresh installations, update your custom-values.yaml to point to the kfuse-auth-users secret.

kfuse-auth:
     oauth2-proxy:
       htpasswdFile:
         existingSecret: kfuse-auth-users

8. Restart kfuse-auth deployment.

kubectl -n kfuse rollout restart deployment kfuse-auth

9. After you log in with the new user/password credentials for the first time, these appear in the Admin > Users interface.