July 2018
Intermediate to advanced
504 pages
11h 34m
English
This identity provider is the opposite of AllowAll, that is, it denies access to everyone. It is useful when you want to temporarily lock your cluster from everyone for maintenance or other purposes. This is the default provider for the Red Hat OpenShift Container Platform.
A configuration snippet of the master configuration file for this provider is as follows:
...<output omitted>... identityProviders: - challenge: true login: true mappingMethod: claim name: anypassword provider: apiVersion: v1 kind: DenyAllPasswordIdentityProvider...<output omitted>...
As you can see, all it takes to enable it is changing Allow to Deny.
Read now
Unlock full access