How to create new users in OpenShift with htpasswd and OAuth

Red Hat OpenShift is an enterprise-ready Kubernetes platform that offers many powerful features that meet today's enterprise needs. For example, one feature of OpenShift is its flexible way of integrating with different authentication mechanisms, whether basic authentication, LDAP, Active Directory, OpenShift login, GitHub login, and so on.

As you start OpenShift the first time, you might find it super easy to leverage the htpasswd utility, which is a built-in tool for most Linux distributions and macOS. This article demonstrates how you can create your own htpasswd file and add it to Red Hat OpenShift through an intuitive web interface.

[ Readers also liked: 5 reasons why you should develop a Linux container strategy ]

You can also follow this video that shows the video demo walking through the steps.

STEP 1: Create an htpasswd file

The command to create a new htpasswd file is shown below:

htpasswd -c -B -b <file name to store HTPASSWD> <username> <password>

You have to replace file name to store HTPASSWD, username, and password values with your own values.

Once the file is created, you can omit the -c option to simply append each username and password to the htpasswd file.

STEP 2: Load htpasswd file from OpenShift

In your Red Hat OpenShift, log in as one of the users with a cluster-admin privilege. Please follow these steps:

1. Click Administration on the left menu
2. Select Cluster Settings
3. Select the Global configuration tab
4. Scroll down to select OAuth
5. Select the HTPASSWD option
6. Select the file

Image

Image

You should be able to find the htpasswd converted to an OpenShift Secret under the openshift-config namespace.

Log out and verify you can login with the htpasswd option

Now, everything is set up. Just log out and find a new selection that indicates the htpasswd login option.

Image

[ Deploy an application with Red Hat OpenShift Service on AWS - Overview: How to deploy an application using Red Hat OpenShift Service on AWS. ]

Wrap up

If you're interested in learning how to automate the process to add multiple users to the htpasswd file, please check out this video that demonstrates a simple Bash script that I wrote. OpenShift is very flexible in integrating with different authentication mechanisms, which include basic authentication, LDAP, Active Directory, OpenShift login, GitHub login, and others.