How to configure an HTPasswd identity provider in OpenShift 4?

Resolution

Note: For OSD and ROSA clusters, please refer to How to use HTPasswd IdP on ROSA or OSD cluster.

Configuration for OpenShift Container Platform 4

1. Create an HTPasswd file by installing the htpasswd utility by installing the httpd-tools package:

   # yum install httpd-tools
   

2. Create or update an users.htpasswd file (note that the -c option will rewrite and truncate the file if already exists) with a user name and hashed password:

   $ htpasswd -c -B -b </path/to/users.htpasswd> <user_name> <password>
   

3. Create the HTPasswd Secret with the previously created users.htpasswd file:

   $ oc create secret generic htpass-secret --from-file=htpasswd=</path/to/users.htpasswd> -n openshift-config
   

4. Create a custom resource for an HTPasswd identity provider:

   $ cat auth.cr
   apiVersion: config.openshift.io/v1
   kind: OAuth
   metadata:
     name: cluster
   spec:
     identityProviders:
     - name: my_htpasswd_provider
       challenge: true
       login: true
       mappingMethod: claim
       type: HTPasswd
       htpasswd:
         fileData:
           name: htpass-secret
   

5. Apply the defined CR:

   $ oc apply -f </path/to/CR>
   

6. Now login using newly created user:

   $ oc login -u <username>
   

7. Confirm that the user logged in successfully, and display the user name:

   $ oc whoami