-
Notifications
You must be signed in to change notification settings - Fork 1.8k
[OSDOCS-15132]Improve the ROSA docs for secure auth flows (XCMSTRAT-600) #95714
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
🤖 Tue Jul 15 20:15:16 - Prow CI generated the docs preview: https://95714--ocpdocs-pr.netlify.app/openshift-rosa-hcp/latest/cli_reference/rosa_cli/rosa-get-started-cli.html |
/retest |
1 similar comment
/retest |
|
||
Alternatively, authenticating with the Red{nbsp}Hat single sign-on (SSO) method automatically sends your CLI instance a refresh token that is valid for 10 hours. Because this authorization code is unique and temporary, it is more secure and reduces the risk of unauthorized access. | ||
|
||
If your system has a web browser, follow the steps in Section 4.9.1, “Logging in to the OpenShift Cluster Manager CLI (ocm-cli) tool with a Red Hat Single Sign-On authorization code” to authenticate with Red Hat Single Sign-On. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🤖 [error] OpenShiftAsciiDoc.SuggestAttribute: Use the AsciiDoc attribute '{cluster-manager}' rather than the plain text product term 'OpenShift Cluster Manager', unless your use case is an exception.
|
||
If your system has a web browser, follow the steps in Section 4.9.1, “Logging in to the OpenShift Cluster Manager CLI (ocm-cli) tool with a Red Hat Single Sign-On authorization code” to authenticate with Red Hat Single Sign-On. | ||
|
||
If you are working with containers, remote hosts, or other environments without a web browser, follow the steps in Section 4.9.2, “Logging in to the OpenShift Cluster Manager CLI with a Red Hat Single Sign-On device code” to authenticate with Red Hat Single Sign-On. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🤖 [error] OpenShiftAsciiDoc.SuggestAttribute: Use the AsciiDoc attribute '{cluster-manager}' rather than the plain text product term 'OpenShift Cluster Manager', unless your use case is an exception.
|
||
If you are working with containers, remote hosts, or other environments without a web browser, follow the steps in Section 4.9.2, “Logging in to the OpenShift Cluster Manager CLI with a Red Hat Single Sign-On device code” to authenticate with Red Hat Single Sign-On. | ||
|
||
Clean this up: The new secure method of authenticating using Red Hat Single Sign-On will not break any existing automations that rely on offline tokens. To use offline tokens for automation or other purposes, you can download the OpenShift Cluster Manager API token from the OpenShift Cluster Manager API Token page. Use service accounts, available on the Service Accounts page, for automation purposes. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🤖 [error] OpenShiftAsciiDoc.SuggestAttribute: Use the AsciiDoc attribute '{cluster-manager}' rather than the plain text product term 'OpenShift Cluster Manager', unless your use case is an exception.
|
||
If you are working with containers, remote hosts, or other environments without a web browser, follow the steps in Section 4.9.2, “Logging in to the OpenShift Cluster Manager CLI with a Red Hat Single Sign-On device code” to authenticate with Red Hat Single Sign-On. | ||
|
||
Clean this up: The new secure method of authenticating using Red Hat Single Sign-On will not break any existing automations that rely on offline tokens. To use offline tokens for automation or other purposes, you can download the OpenShift Cluster Manager API token from the OpenShift Cluster Manager API Token page. Use service accounts, available on the Service Accounts page, for automation purposes. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🤖 [error] OpenShiftAsciiDoc.SuggestAttribute: Use the AsciiDoc attribute '{cluster-manager}' rather than the plain text product term 'OpenShift Cluster Manager', unless your use case is an exception.
[id="rosa-login-sso_auth{context}"] | ||
=== Authenticating the {product-title} (ROSA) CLI with Red Hat Single Sign-On authorization code | ||
|
||
|
||
. To log into the ROSA CLI (`rosa`) with a Red{nbsp}Hat single sign-on authorization code, run the following command: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🤖 [error] RedHat.TermsErrors: Use 'log in to' rather than 'log into'. For more information, see RedHat.TermsErrors.
@mletalie: all tests passed! Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
Version(s):
4.19+
Issue:
https://issues.redhat.com/browse/OSDOCS-15132
Link to docs preview:
HCP
Classic
QE review:
Additional information: