From 76bfb1b10544833179cf4e2c985784a092d1efd9 Mon Sep 17 00:00:00 2001 From: Max Bridges Date: Fri, 17 Jul 2026 16:58:35 -0400 Subject: [PATCH 1/3] OSDOCS-18986: CQA pre-migration for Understanding identity provider configuration assembly --- .../understanding-identity-provider.adoc | 59 +---------------- .../identity-provider-supported-types.adoc | 66 +++++++++++++++++++ .../troubleshooting-security.adoc | 2 +- welcome/learn_more_about_openshift.adoc | 2 +- 4 files changed, 69 insertions(+), 60 deletions(-) create mode 100644 modules/identity-provider-supported-types.adoc diff --git a/authentication/understanding-identity-provider.adoc b/authentication/understanding-identity-provider.adoc index 0e8bac440876..c87fc89ab3ff 100644 --- a/authentication/understanding-identity-provider.adoc +++ b/authentication/understanding-identity-provider.adoc @@ -15,64 +15,7 @@ The {product-title} master includes a built-in OAuth server. include::modules/identity-provider-overview.adoc[leveloffset=+1] -[id="supported-identity-providers"] -== Supported identity providers - -You can configure the following types of identity providers: - -[cols="2a,8a",options="header"] -|=== - -|Identity provider -|Description - -|xref:../authentication/identity_providers/configuring-htpasswd-identity-provider.adoc#configuring-htpasswd-identity-provider[htpasswd] -|Configure the `htpasswd` identity provider to validate user names and passwords -against a flat file generated using -link:http://httpd.apache.org/docs/2.4/programs/htpasswd.html[`htpasswd`]. - -|xref:../authentication/identity_providers/configuring-keystone-identity-provider.adoc#configuring-keystone-identity-provider[Keystone] -|Configure the `keystone` identity provider to integrate -your {product-title} cluster with Keystone to enable shared authentication with -an OpenStack Keystone v3 server configured to store users in an internal -database. - -|xref:../authentication/identity_providers/configuring-ldap-identity-provider.adoc#configuring-ldap-identity-provider[LDAP] -|Configure the `ldap` identity provider to validate user names and passwords -against an LDAPv3 server, using simple bind authentication. - -|xref:../authentication/identity_providers/configuring-basic-authentication-identity-provider.adoc#configuring-basic-authentication-identity-provider[Basic authentication] -|Configure a `basic-authentication` identity provider for users to log in to -{product-title} with credentials validated against a remote identity provider. -Basic authentication is a generic backend integration mechanism. - -|xref:../authentication/identity_providers/configuring-request-header-identity-provider.adoc#configuring-request-header-identity-provider[Request header] -|Configure a `request-header` identity provider to identify users from request -header values, such as `X-Remote-User`. It is typically used in combination with -an authenticating proxy, which sets the request header value. - -|xref:../authentication/identity_providers/configuring-github-identity-provider.adoc#configuring-github-identity-provider[GitHub or GitHub Enterprise] -|Configure a `github` identity provider to validate user names and passwords -against GitHub or GitHub Enterprise's OAuth authentication server. - -|xref:../authentication/identity_providers/configuring-gitlab-identity-provider.adoc#configuring-gitlab-identity-provider[GitLab] -|Configure a `gitlab` identity provider to use -link:https://gitlab.com/[GitLab.com] or any other GitLab instance as an identity -provider. - -|xref:../authentication/identity_providers/configuring-google-identity-provider.adoc#configuring-google-identity-provider[Google] -|Configure a `google` identity provider using -link:https://developers.google.com/identity/protocols/OpenIDConnect[Google's OpenID Connect integration]. - -|xref:../authentication/identity_providers/configuring-oidc-identity-provider.adoc#configuring-oidc-identity-provider[OpenID Connect] -|Configure an `oidc` identity provider to integrate with an OpenID Connect -identity provider using an -link:http://openid.net/specs/openid-connect-core-1_0.html#CodeFlowAuth[Authorization Code Flow]. - -|=== - -Once an identity provider has been defined, you can -xref:../authentication/using-rbac.adoc#authorization-overview_using-rbac[use RBAC to define and apply permissions]. +include::modules/identity-provider-supported-types.adoc[leveloffset=+1] include::modules/authentication-remove-kubeadmin.adoc[leveloffset=+1] diff --git a/modules/identity-provider-supported-types.adoc b/modules/identity-provider-supported-types.adoc new file mode 100644 index 000000000000..7189dd86466c --- /dev/null +++ b/modules/identity-provider-supported-types.adoc @@ -0,0 +1,66 @@ +// Module included in the following assemblies: +// +// * authentication/understanding-identity-provider.adoc +// +// This module was created from assembly body content during a CQA pass; it retains the xrefs it inherited per doc_guidelines.adoc's exception for modules split from an assembly, and must only ever be included from one location. + +:_mod-docs-content-type: REFERENCE +[id="identity-provider-supported-types_{context}"] += Supported identity providers + +[role="_abstract"] +You can configure the following types of identity providers: + +[cols="2a,8a",options="header"] +|=== + +|Identity provider +|Description + +|xref:../authentication/identity_providers/configuring-htpasswd-identity-provider.adoc#configuring-htpasswd-identity-provider[htpasswd] +|Configure the `htpasswd` identity provider to validate user names and passwords +against a flat file generated using +link:http://httpd.apache.org/docs/2.4/programs/htpasswd.html[`htpasswd`]. + +|xref:../authentication/identity_providers/configuring-keystone-identity-provider.adoc#configuring-keystone-identity-provider[Keystone] +|Configure the `keystone` identity provider to integrate +your {product-title} cluster with Keystone to enable shared authentication with +an OpenStack Keystone v3 server configured to store users in an internal +database. + +|xref:../authentication/identity_providers/configuring-ldap-identity-provider.adoc#configuring-ldap-identity-provider[LDAP] +|Configure the `ldap` identity provider to validate user names and passwords +against an LDAPv3 server, using simple bind authentication. + +|xref:../authentication/identity_providers/configuring-basic-authentication-identity-provider.adoc#configuring-basic-authentication-identity-provider[Basic authentication] +|Configure a `basic-authentication` identity provider for users to log in to +{product-title} with credentials validated against a remote identity provider. +Basic authentication is a generic backend integration mechanism. + +|xref:../authentication/identity_providers/configuring-request-header-identity-provider.adoc#configuring-request-header-identity-provider[Request header] +|Configure a `request-header` identity provider to identify users from request +header values, such as `X-Remote-User`. It is typically used in combination with +an authenticating proxy, which sets the request header value. + +|xref:../authentication/identity_providers/configuring-github-identity-provider.adoc#configuring-github-identity-provider[GitHub or GitHub Enterprise] +|Configure a `github` identity provider to validate user names and passwords +against GitHub or GitHub Enterprise's OAuth authentication server. + +|xref:../authentication/identity_providers/configuring-gitlab-identity-provider.adoc#configuring-gitlab-identity-provider[GitLab] +|Configure a `gitlab` identity provider to use +link:https://gitlab.com/[GitLab.com] or any other GitLab instance as an identity +provider. + +|xref:../authentication/identity_providers/configuring-google-identity-provider.adoc#configuring-google-identity-provider[Google] +|Configure a `google` identity provider using +link:https://developers.google.com/identity/protocols/OpenIDConnect[Google's OpenID Connect integration]. + +|xref:../authentication/identity_providers/configuring-oidc-identity-provider.adoc#configuring-oidc-identity-provider[OpenID Connect] +|Configure an `oidc` identity provider to integrate with an OpenID Connect +identity provider using an +link:http://openid.net/specs/openid-connect-core-1_0.html#CodeFlowAuth[Authorization Code Flow]. + +|=== + +Once an identity provider has been defined, you can +xref:../authentication/using-rbac.adoc#authorization-overview_using-rbac[use RBAC to define and apply permissions]. diff --git a/post_installation_configuration/day_2_core_cnf_clusters/troubleshooting/troubleshooting-security.adoc b/post_installation_configuration/day_2_core_cnf_clusters/troubleshooting/troubleshooting-security.adoc index e7e17461ad40..718b0a68dd15 100644 --- a/post_installation_configuration/day_2_core_cnf_clusters/troubleshooting/troubleshooting-security.adoc +++ b/post_installation_configuration/day_2_core_cnf_clusters/troubleshooting/troubleshooting-security.adoc @@ -13,4 +13,4 @@ include::modules/troubleshooting-security-authentication.adoc[leveloffset=+1] [role="_additional-resources"] .Additional resources -* xref:../../../authentication/understanding-identity-provider.adoc#supported-identity-providers[Supported identity providers] \ No newline at end of file +* xref:../../../authentication/understanding-identity-provider.adoc#identity-provider-supported-types_understanding-identity-provider[Supported identity providers] \ No newline at end of file diff --git a/welcome/learn_more_about_openshift.adoc b/welcome/learn_more_about_openshift.adoc index f365fc50157a..b5e26760e728 100644 --- a/welcome/learn_more_about_openshift.adoc +++ b/welcome/learn_more_about_openshift.adoc @@ -150,7 +150,7 @@ Managing cluster components:: | xref:../authentication/impersonating-system-admin.adoc#impersonating-system-admin[Impersonating the system:admin user] | xref:../authentication/understanding-authentication.adoc#understanding-authentication[Manage authentication] -| xref:../authentication/understanding-identity-provider.adoc#supported-identity-providers[Supported identity providers] +| xref:../authentication/understanding-identity-provider.adoc#identity-provider-supported-types_understanding-identity-provider[Supported identity providers] | Manage xref:../security/certificates/replacing-default-ingress-certificate.adoc#replacing-default-ingress[Ingress], xref:../security/certificates/api-server.adoc#api-server-certificates[API server], and xref:../security/certificates/service-serving-certificate.adoc#add-service-serving[service] certificates | xref:../networking/network_security/network-policy-apis.adoc#network-policy-apis[Network security] From f5f63ad90fad13297a498379beccbe0589b59f13 Mon Sep 17 00:00:00 2001 From: Max Bridges Date: Fri, 17 Jul 2026 17:26:30 -0400 Subject: [PATCH 2/3] OSDOCS-18986: Preserve original anchor ID per updated team ID policy --- modules/identity-provider-supported-types.adoc | 2 +- .../troubleshooting/troubleshooting-security.adoc | 2 +- welcome/learn_more_about_openshift.adoc | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/modules/identity-provider-supported-types.adoc b/modules/identity-provider-supported-types.adoc index 7189dd86466c..429e43310cc7 100644 --- a/modules/identity-provider-supported-types.adoc +++ b/modules/identity-provider-supported-types.adoc @@ -5,7 +5,7 @@ // This module was created from assembly body content during a CQA pass; it retains the xrefs it inherited per doc_guidelines.adoc's exception for modules split from an assembly, and must only ever be included from one location. :_mod-docs-content-type: REFERENCE -[id="identity-provider-supported-types_{context}"] +[id="supported-identity-providers"] = Supported identity providers [role="_abstract"] diff --git a/post_installation_configuration/day_2_core_cnf_clusters/troubleshooting/troubleshooting-security.adoc b/post_installation_configuration/day_2_core_cnf_clusters/troubleshooting/troubleshooting-security.adoc index 718b0a68dd15..e7e17461ad40 100644 --- a/post_installation_configuration/day_2_core_cnf_clusters/troubleshooting/troubleshooting-security.adoc +++ b/post_installation_configuration/day_2_core_cnf_clusters/troubleshooting/troubleshooting-security.adoc @@ -13,4 +13,4 @@ include::modules/troubleshooting-security-authentication.adoc[leveloffset=+1] [role="_additional-resources"] .Additional resources -* xref:../../../authentication/understanding-identity-provider.adoc#identity-provider-supported-types_understanding-identity-provider[Supported identity providers] \ No newline at end of file +* xref:../../../authentication/understanding-identity-provider.adoc#supported-identity-providers[Supported identity providers] \ No newline at end of file diff --git a/welcome/learn_more_about_openshift.adoc b/welcome/learn_more_about_openshift.adoc index b5e26760e728..f365fc50157a 100644 --- a/welcome/learn_more_about_openshift.adoc +++ b/welcome/learn_more_about_openshift.adoc @@ -150,7 +150,7 @@ Managing cluster components:: | xref:../authentication/impersonating-system-admin.adoc#impersonating-system-admin[Impersonating the system:admin user] | xref:../authentication/understanding-authentication.adoc#understanding-authentication[Manage authentication] -| xref:../authentication/understanding-identity-provider.adoc#identity-provider-supported-types_understanding-identity-provider[Supported identity providers] +| xref:../authentication/understanding-identity-provider.adoc#supported-identity-providers[Supported identity providers] | Manage xref:../security/certificates/replacing-default-ingress-certificate.adoc#replacing-default-ingress[Ingress], xref:../security/certificates/api-server.adoc#api-server-certificates[API server], and xref:../security/certificates/service-serving-certificate.adoc#add-service-serving[service] certificates | xref:../networking/network_security/network-policy-apis.adoc#network-policy-apis[Network security] From a360bb2aca30834be05b716be40ee9546d8fa107 Mon Sep 17 00:00:00 2001 From: Max Bridges Date: Sat, 18 Jul 2026 18:41:54 -0400 Subject: [PATCH 3/3] OSDOCS-18986: Append _{context} to preserved ID, matching Andrea's storage PR pattern --- modules/identity-provider-supported-types.adoc | 2 +- .../troubleshooting/troubleshooting-security.adoc | 2 +- welcome/learn_more_about_openshift.adoc | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/modules/identity-provider-supported-types.adoc b/modules/identity-provider-supported-types.adoc index 429e43310cc7..468313523f15 100644 --- a/modules/identity-provider-supported-types.adoc +++ b/modules/identity-provider-supported-types.adoc @@ -5,7 +5,7 @@ // This module was created from assembly body content during a CQA pass; it retains the xrefs it inherited per doc_guidelines.adoc's exception for modules split from an assembly, and must only ever be included from one location. :_mod-docs-content-type: REFERENCE -[id="supported-identity-providers"] +[id="supported-identity-providers_{context}"] = Supported identity providers [role="_abstract"] diff --git a/post_installation_configuration/day_2_core_cnf_clusters/troubleshooting/troubleshooting-security.adoc b/post_installation_configuration/day_2_core_cnf_clusters/troubleshooting/troubleshooting-security.adoc index e7e17461ad40..f8b752c94c1e 100644 --- a/post_installation_configuration/day_2_core_cnf_clusters/troubleshooting/troubleshooting-security.adoc +++ b/post_installation_configuration/day_2_core_cnf_clusters/troubleshooting/troubleshooting-security.adoc @@ -13,4 +13,4 @@ include::modules/troubleshooting-security-authentication.adoc[leveloffset=+1] [role="_additional-resources"] .Additional resources -* xref:../../../authentication/understanding-identity-provider.adoc#supported-identity-providers[Supported identity providers] \ No newline at end of file +* xref:../../../authentication/understanding-identity-provider.adoc#supported-identity-providers_understanding-identity-provider[Supported identity providers] \ No newline at end of file diff --git a/welcome/learn_more_about_openshift.adoc b/welcome/learn_more_about_openshift.adoc index f365fc50157a..c7245da161f2 100644 --- a/welcome/learn_more_about_openshift.adoc +++ b/welcome/learn_more_about_openshift.adoc @@ -150,7 +150,7 @@ Managing cluster components:: | xref:../authentication/impersonating-system-admin.adoc#impersonating-system-admin[Impersonating the system:admin user] | xref:../authentication/understanding-authentication.adoc#understanding-authentication[Manage authentication] -| xref:../authentication/understanding-identity-provider.adoc#supported-identity-providers[Supported identity providers] +| xref:../authentication/understanding-identity-provider.adoc#supported-identity-providers_understanding-identity-provider[Supported identity providers] | Manage xref:../security/certificates/replacing-default-ingress-certificate.adoc#replacing-default-ingress[Ingress], xref:../security/certificates/api-server.adoc#api-server-certificates[API server], and xref:../security/certificates/service-serving-certificate.adoc#add-service-serving[service] certificates | xref:../networking/network_security/network-policy-apis.adoc#network-policy-apis[Network security]