OpenShift Security Concepts

From NovaOrdis Knowledge Base
Revision as of 19:57, 5 July 2017 by Ovidiu (talk | contribs) (→‎User)
Jump to navigation Jump to search

External

Internal

User

Interaction with OpenShift is associated with a user. The users are internally represented with an User object, which in turn represents an actor. Permissions can be given to actors in the system by adding roles to them, or their groups. There are several user types:


Regular User

System User

Group

Authentication

Authentication Methods

Identity Providers

Authorization

Security Context Constraints

https://docs.openshift.com/container-platform/latest/architecture/additional_concepts/authorization.html#security-context-constraints

OpenShift uses Security Context Constraints (SCCs) to control the actions that a pod can perform and what it has the ability to access.