Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Keycloak How-to #1839

Merged
merged 10 commits into from
Nov 29, 2023
Merged

Keycloak How-to #1839

merged 10 commits into from
Nov 29, 2023

Conversation

karl-cardenas-coding
Copy link
Contributor

@karl-cardenas-coding karl-cardenas-coding commented Nov 22, 2023

Describe the Change

This PR carries over the work @dmitry-spectro did in PR #1383

Review Changes

💻 Preview URL

🎫 DOC-488

Copy link

netlify bot commented Nov 22, 2023

Deploy Preview for docs-spectrocloud ready!

Name Link
🔨 Latest commit eff4170
🔍 Latest deploy log https://app.netlify.com/sites/docs-spectrocloud/deploys/65674c5152a69a00089d0884
😎 Deploy Preview https://deploy-preview-1839--docs-spectrocloud.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@karl-cardenas-coding karl-cardenas-coding added backport-version-4-0 Backport change to version 4.0 auto-backport Enable backport backport-version-3-4 Backport change to version 3.4 backport-version-4-1 Backport change to version 4.1 labels Nov 22, 2023
Copy link
Contributor

@lennessyy lennessyy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good - added some copyediting suggestions

Co-authored-by: Lenny Chen <55669665+lennessyy@users.noreply.github.com>
Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remaining comments which cannot be posted as a review comment to avoid GitHub Rate Limit

vale

docs/docs-content/user-management/saml-sso/palette-sso-with-keycloak.md|194 col 25| [Vale.Spelling] Did you really mean 'Keycloak'?
docs/docs-content/user-management/saml-sso/palette-sso-with-keycloak.md|202 col 138| [Vale.Spelling] Did you really mean 'Keycloak'?
docs/docs-content/user-management/saml-sso/palette-sso-with-keycloak.md|207 col 4| [Vale.Spelling] Did you really mean 'Keycloak'?
docs/docs-content/user-management/saml-sso/palette-sso-with-keycloak.md|209 col 4| [Vale.Spelling] Did you really mean 'Keycloak'?
docs/docs-content/user-management/saml-sso/palette-sso-with-keycloak.md|209 col 13| [Vale.Spelling] Did you really mean 'Quickstarts'?
docs/docs-content/user-management/saml-sso/palette-sso-with-keycloak.md|211 col 11| [Vale.Spelling] Did you really mean 'Keycloak'?

@@ -36,3 +36,6 @@ Enable SSO by following our [Enable SSO in Palette](enable-saml.md) guide.


- [Palette SSO with Okta SAML](palette-sso-with-okta-saml.md)


- [Palette SSO with Keycloak](palette-sso-with-keycloak.md)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Keycloak'?

---


Keycloak is an open-source Identity and Access Management (IAM) tool, primarily used for simplifying the authentication and authorization processes in modern applications and services. It provides a wide range of features including Single Sign-On (SSO), two-factor authentication, and social login capabilities. Keycloak is designed to manage users, credentials, roles, and groups efficiently, enabling developers to secure their applications and services with minimal additional coding. Keycloak supports various industry-standard protocols like OpenID Connect, OAuth 2.0, and SAML 2.0, facilitating integration with a multitude of platforms and services.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Keycloak'?

---


Keycloak is an open-source Identity and Access Management (IAM) tool, primarily used for simplifying the authentication and authorization processes in modern applications and services. It provides a wide range of features including Single Sign-On (SSO), two-factor authentication, and social login capabilities. Keycloak is designed to manage users, credentials, roles, and groups efficiently, enabling developers to secure their applications and services with minimal additional coding. Keycloak supports various industry-standard protocols like OpenID Connect, OAuth 2.0, and SAML 2.0, facilitating integration with a multitude of platforms and services.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Keycloak'?

---


Keycloak is an open-source Identity and Access Management (IAM) tool, primarily used for simplifying the authentication and authorization processes in modern applications and services. It provides a wide range of features including Single Sign-On (SSO), two-factor authentication, and social login capabilities. Keycloak is designed to manage users, credentials, roles, and groups efficiently, enabling developers to secure their applications and services with minimal additional coding. Keycloak supports various industry-standard protocols like OpenID Connect, OAuth 2.0, and SAML 2.0, facilitating integration with a multitude of platforms and services.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Keycloak'?

Keycloak is an open-source Identity and Access Management (IAM) tool, primarily used for simplifying the authentication and authorization processes in modern applications and services. It provides a wide range of features including Single Sign-On (SSO), two-factor authentication, and social login capabilities. Keycloak is designed to manage users, credentials, roles, and groups efficiently, enabling developers to secure their applications and services with minimal additional coding. Keycloak supports various industry-standard protocols like OpenID Connect, OAuth 2.0, and SAML 2.0, facilitating integration with a multitude of platforms and services.


You can integrate Keycloak with Palette to enable SSO for your users. This guide will walk you through the steps to set up Keycloak as an OIDC provider for Palette.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Keycloak'?

![alt_text](/keycloak/user-management_saml-sso_keycloak-10-keycloak-admin.png "Keycloak Admin")


You have now configured SSO for Palette with Keycloak. You can now log in to Palette using the admin user you created in Keycloak. Use the validation steps below to validate the SSO configuration. Check out the [Create a Team](#create-a-team) section to learn how to create a team and assign roles to users.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Keycloak'?


1. Log out of Palette. Click on the top right **User Menu** and select **Log out**.

2. Sign in to Palette using the admin user you created in Keycloak. You will be redirected to the Keycloak login page. Enter the credentials for the admin user you created in Keycloak.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Keycloak'?


![Keycloak Admin console](/keycloak//user-management_palette-rback_keycloak_login.png)

3. Upon successful authentication, you will be redirected to Palette. You will be logged in to Palette as the admin user you created in Keycloak.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Keycloak'?


## Create a Team

1. Log in to Palette as a Tenant Admin. Navigate to the left **Main Menu** and select **Users & Teams**. Click on the **Teams** tab to access the Teams page. Click on the **Create Team** button to create a new team.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Terms] Use 'admin' instead of 'Admin'.

2. Provide a team name, such as `admins` but leave the **Members** field empty. Click on **Confirm** to create the team.


3. Next, select the **admins** row to access the team settings page. Click on **New Project Role** and asdd the **Project Admin** role to the **Default** project. Click on **Confirm** to save the changes.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'asdd'?


- [Keycloak Documentation](https://www.keycloak.org/documentation)

- [Keycloak Quickstarts](https://www.keycloak.org/getting-started/getting-started-kube)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Quickstarts'?

Copy link
Contributor

Images automagically compressed by Calibre's image-actions

Compression reduced images by 29.5%, saving 2.15 MB.

Filename Before After Improvement Visual comparison
static/assets/docs/images/keycloak/user-management_palette-rback_keycloak_login.png 179.77 KB 105.49 KB -41.3% View diff
static/assets/docs/images/keycloak/user-management_palette-rback_palette-rbac-model.png 3.58 MB 2.45 MB -31.7% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-01-keycloak-service.png 215.70 KB 140.11 KB -35.0% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-02-callback-url.png 227.44 KB 178.16 KB -21.7% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-03-create-client.png 179.94 KB 126.67 KB -29.6% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-04-palette-username.png 129.53 KB 89.70 KB -30.7% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-05-client-authentication.png 130.57 KB 82.24 KB -37.0% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-06-keycloak-callback.png 170.72 KB 120.03 KB -29.7% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-07-keycloak-credentials.png 207.99 KB 165.36 KB -20.5% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-08-palette-callback.png 405.77 KB 331.50 KB -18.3% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-09-palette-oidc-enabled.png 285.79 KB 227.41 KB -20.4% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-10-keycloak-admin.png 182.10 KB 142.37 KB -21.8% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-11-palette-sso.png 656.85 KB 439.82 KB -33.0% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-14-palette-groups.png 124.11 KB 90.28 KB -27.3% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-15-palette-project.png 150.37 KB 107.85 KB -28.3% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-16-palette-sso-admins.png 216.78 KB 155.66 KB -28.2% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-17-keycloak-user.png 187.39 KB 144.48 KB -22.9% View diff
static/assets/docs/images/keycloak/user-management_saml-sso_keycloak-18-keycloak-password.png 133.39 KB 98.38 KB -26.2% View diff

509 images did not require optimisation.


12. Click on **Save** to save the client configuration.

![alt_text](/keycloak/user-management_saml-sso_keycloak-06-keycloak-callback.png "Keycloak callback")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'alt_text'?

@karl-cardenas-coding karl-cardenas-coding merged commit 13521cd into master Nov 29, 2023
10 checks passed
@karl-cardenas-coding karl-cardenas-coding deleted the keycloak-v2 branch November 29, 2023 14:48
vault-token-factory-spectrocloud bot pushed a commit that referenced this pull request Nov 29, 2023
* docs: migrated keycloak and refactored

* docs: removed unused images

* Apply suggestions from code review

Co-authored-by: Lenny Chen <55669665+lennessyy@users.noreply.github.com>

* docs: added vale rule for keycloak

* Optimised images with calibre/image-actions

---------

Co-authored-by: Lenny Chen <55669665+lennessyy@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
(cherry picked from commit 13521cd)
vault-token-factory-spectrocloud bot pushed a commit that referenced this pull request Nov 29, 2023
* docs: migrated keycloak and refactored

* docs: removed unused images

* Apply suggestions from code review

Co-authored-by: Lenny Chen <55669665+lennessyy@users.noreply.github.com>

* docs: added vale rule for keycloak

* Optimised images with calibre/image-actions

---------

Co-authored-by: Lenny Chen <55669665+lennessyy@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
(cherry picked from commit 13521cd)
@vault-token-factory-spectrocloud
Copy link
Contributor

💔 Some backports could not be created

Status Branch Result
version-4-0
version-3-4 Backport failed because of merge conflicts
version-4-1

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

backport --pr 1839

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

karl-cardenas-coding added a commit that referenced this pull request Nov 29, 2023
* docs: migrated keycloak and refactored

* docs: removed unused images

* Apply suggestions from code review

Co-authored-by: Lenny Chen <55669665+lennessyy@users.noreply.github.com>

* docs: added vale rule for keycloak

* Optimised images with calibre/image-actions

---------

Co-authored-by: Lenny Chen <55669665+lennessyy@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
(cherry picked from commit 13521cd)

Co-authored-by: Karl Cardenas <karl@spectrocloud.com>
karl-cardenas-coding added a commit that referenced this pull request Nov 29, 2023
* docs: migrated keycloak and refactored

* docs: removed unused images

* Apply suggestions from code review

Co-authored-by: Lenny Chen <55669665+lennessyy@users.noreply.github.com>

* docs: added vale rule for keycloak

* Optimised images with calibre/image-actions

---------

Co-authored-by: Lenny Chen <55669665+lennessyy@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
(cherry picked from commit 13521cd)

Co-authored-by: Karl Cardenas <karl@spectrocloud.com>
karl-cardenas-coding added a commit that referenced this pull request Nov 29, 2023
* docs: migrated keycloak and refactored

* docs: removed unused images

* Apply suggestions from code review

Co-authored-by: Lenny Chen <55669665+lennessyy@users.noreply.github.com>

* docs: added vale rule for keycloak

* Optimised images with calibre/image-actions

---------

Co-authored-by: Lenny Chen <55669665+lennessyy@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-backport Enable backport backport-version-3-4 Backport change to version 3.4 backport-version-4-0 Backport change to version 4.0 backport-version-4-1 Backport change to version 4.1
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants