To work with Deckhouse Stronghold, get the access parameters from the administrator. Log in from the command line with the Deckhouse CLI d8 utility or through the web interface if it is available in the installation.

Access parameters:

  • Stronghold server address
  • Authentication method and path
  • Web interface address, if you log in through a browser
  • Additional connection parameters, if they are required in your installation

Log in via the CLI

To configure access to your project from the command line, follow these steps.

  1. Install the Deckhouse CLI d8 utility.

  2. Set the Stronghold server address in an environment variable:

    export STRONGHOLD_ADDR=https://stronghold.domain.my

    Replace https://stronghold.domain.my with the address you received from the administrator.

  3. Log in through OIDC. To do this, authenticate to Stronghold using the following command:

    d8 stronghold login -path=oidc_deckhouse -method=oidc -no-print

    This example uses OIDC authentication with the oidc method and the oidc_deckhouse path. If your installation uses different parameters, specify the values provided by the administrator.

    After you run the command, the Deckhouse CLI tool will open a browser to complete login through the configured OIDC provider. If the browser does not open automatically, copy the URL from the command output and open it manually.

  4. Verify access using the following command:

    d8 stronghold status

To work with Deckhouse Stronghold, use commands in the following format:

d8 stronghold <command>

Log in through the web interface

If the Stronghold web interface is available in your installation, log in through a browser:

  1. Open the Stronghold web interface address provided by the administrator.
  2. Select a login method, for example, OIDC.
  3. If required, specify the role name or any other parameters provided by the administrator.
  4. Authenticate.

After a successful login, Stronghold opens the user interface with the corresponding access permissions.

After logging in, it’s recommended that you create a test secret. The required steps are described in “Creating a test secret”.