During installation of a platform (i.e., of a cluster with the control plane included), Kublr automatically creates the admin user to access Kublr UI and administrative functions of the platform as soon as it is installed.
The installation process includes step (required, cannot be omitted) when you need to provide a password for this user:
For security’s sake, after cluster/control plane installation, you need to disable this automatically created user and create a new one with the safe permissions/credentials.
As soon as your platform is installed, access its Keycloak UI via the platform page → CLUSTER tab → Features section (scroll down) → Keycloak link.
NOTE Use
adminuser and password provided by you during platform creation to access.
In Keycloak, go to Users, and click Add user.
Set Username.
Click Join Groups and include the user into the KublrFullAdmins group.
Click Create. The new user is created, its page is displayed.
Go to your user’s Role mapping tab.
Click Assign role and assign the admin and realm-admin roles.
Go to the Credentials tab.
Click Set password. Set and confirm the password, do not make the password Temporary (uncheck the option).
Try to log in under the newly created user to check credentials and permissions.
If the test was successful, in Keycloak, disable the initial admin user.
