Just Another IT Blog

It's time to share some of my experiences, crazy ideas, tips and tricks !!!

Post Page Advertisement [Top]

Continuing my series of command lines options for managing VMware Pivotal Container Service (PKS), today I present you the User Account and Authentication command line.

The primary role of UAAC is to create, delete and manage users within the context of PKS, which means give Cloud Admins authority to create and manage Kubernetes clusters themselves, giving them the freedom and agility the business demands.

Let's see how easy it is:

*** Installing UAAC CLI ***
UAAC is installed with the use of gem, which allows you to interact with RubyGems, so in order to use it first, we need to install ruby and ruby-dev.
Obs: I’m using Ubuntu, if you are using other distribution use the accordingly install tool.

- Install Ruby
Run: apt install ruby

- Install ruby-dev
Run: apt install ruby-dev

Now that the prerequisites are done, let's install UAAC
- Install UAAC
Run: gem install cf-uaac

To make sure UAAC has been installed successfully
- Testing UAAC installation
Run: uaac version


*** Connecting to PKS ***
With UAAC installed the first thing we have to do is point it to our PKS target.

- Targeting PKS
Run: uaac target https://”UAA_URL”:8443 --skip-ssl-validation

During Pivotal Container Service Tile configuration, we set up the UAA URL.

 
Once the target is configured, log in with the credential to perform the actions you want.
 Since I want to create users I’m using admin.

- Login to UAA
Run: uaac token client get admin -s “password”

You can find the password as part of Pivotal Container Service Tile


































*** Creating Users ***
Now it’s just a matter of adding the users

- create user
Run: uaac user add “user_id” --emails “e-mail” -p “password”

The final thing is to attribute some privileges to the user
- adjusting group membership
Run: uaac member add “group” “user_id”

Thinking about PKS cluster’s management we have two main groups;
- pks.clusters.admin: allow the user to create and manage all clusters within the system;
- pks.clusters.manage: allow the user to create and manage only the cluster’s they own;

That’s all I have for today’s post, next one I will show you how to create Kubernetes cluster with the users we just created.

Stay tuned


Bottom Ad [Post Page]