Authenticate an Account with the Command Line

Retrieve a token to authenticate to the Cray CLI using the command line. If the Cray CLI is needed before localization occurs and Keycloak is setup, an administrator can use this procedure to authenticate to the Cray CLI.

Procedure

  1. (ncn-mw#) Retrieve the Kubernetes secret to be used for authentication.

    ADMIN_SECRET=$(kubectl get secrets admin-client-auth -ojsonpath='{.data.client-secret}' | base64 -d)

  2. (ncn-mw#) Create the setup-token.json file and modify it to be readable only by root.

    touch /tmp/setup-token.json && chmod 600 /tmp/setup-token.json

  3. (ncn-mw#) Retrieve a token for the new Keycloak account.

    curl -s -d grant_type=client_credentials -d client_id=admin-client -d client_secret="${ADMIN_SECRET}" \
    https://api-gw-service-nmn.local/keycloak/realms/shasta/protocol/openid-connect/token > /tmp/setup-token.json

  4. (ncn-mw#) Set up the new account with the authenticated token.

    export CRAY_CREDENTIALS=/tmp/setup-token.json