Creating native users for testing

For testing or demo environments, you can simplify operations by adding more native users. For production deployments, we strongly recommend configuring an external IdP.

Currently, it's not possible to create human users with the Console, but only by tweaking the Hybrid Manager configuration file.

Adding a native user

Append new users to the portal.authentication.staticPasswords section during or after installation. You will have to replace this value either in your values.yaml file or HybridControlPlane custom resource, depending on the installation method you use.

portal:
  authentication:
    staticPasswords:
      - email: "owner@mycompany.com"
        hash: "$2y$10$STTzuGJa3PydqHvlzi2z6OgDU1G/JLTqiuGblH.RemIutWxkztN5m"
        username: "owner@mycompany.com"
        userID: "c5998173-a605-449a-a9a5-4a9c33e26df7"
     - email: "<userA@example.com>"          
       hash: "<example_hashed_password>"
       username: "<userA@example.com>"
       userID: "<unique_user_id>"  

Apply the DEX configuration to populate the changes.

Parameters

Settings for the user in the portal.authentication.staticPasswords entry. Each user needs values for email, hash, username and userID.

ParameterDescription
emailEmail address of the user. Also serves as the user's login identifier for accessing the Console.
hashBcrypt-hashed user password for password store. To generate this value, use echo ${password} | htpasswd -BinC 10 userA | cut -d: -f2, where the actual password is stored behind the ${password} variable. userA represents the username used during the password hashing process. It can be any arbitrary text, as it's not used elsewhere in the configuration; only the resulting hash is utilized.
userIDEach new user configured with a static password must have a distinct, unique identifier for the user (uuid). You can choose to generate this value with a UUID generator tool or assign a random sequence of characters manually.
usernameUnique username for the user. This is the primary identifier for logging into the Console. It can be the same as email.

Could this page be better? Report a problem or suggest an addition!