This KB provides guidance on securely generating secrets and credentials—such as service accounts, API tokens, or client secrets—for accessing and managing OpenShift clusters in SWIFT. These credentials are required to allow SWIFT to authenticate with the cluster and perform discovery and management operations securely.
AWS OpenShift (ROSA) Cluster
For AWS OpenShift (ROSA), the credentials typically involve creating an AWS IAM user with the necessary permissions and generating the Access Key ID and Secret Access Key.
To create a service account , refer to the Adding OpenShift cluster service account for SWIFT section in the Pre-requisite and Installation Guide.
GCP OpenShift Cluster
For GCP OpenShift, the credentials typically involve creating a GCP Service Account with the necessary permissions and generating a JSON key file.
To create a service account, refer to the Adding OpenShift cluster service account for SWIFT section in the Pre-requisite and Installation Guide.
Azure Red Hat OpenShift (ARO) Cluster
For Azure OpenShift, the credentials typically involve creating a Service Principal in Azure AD with the required permissions.
To create a Service Principal and service account for adding the Azure OpenShift cluster, refer to the Adding OpenShift cluster service account for SWIFT section in the Pre-requisite and Installation Guide.
IBM OpenShift Origin (OKD) Cluster
For IBM OpenShift Origin, the credentials typically involve creating an IBM Cloud service account with the necessary permissions and generating an API key.
For detailed steps, refer to the Adding OpenShift cluster service account for SWIFT section in the Pre-requisite and Installation Guide.
IBM OpenShift Container Platform (OCP) Cluster
For IBM OCP, the credentials typically involve creating an IBM Cloud service account with the necessary permissions and generating an API key.
To create a service account refer to the Adding OpenShift cluster service account for SWIFT section in the Pre-requisite and Installation Guide.
Local OpenShift (OKD) Cluster
For a local OpenShift cluster, the credentials typically involve creating a dedicated Service Account within the cluster.
Assign the necessary permissions using Role or ClusterRole and bind them via RoleBinding or ClusterRoleBinding.
To create a Service Account, refer to the Adding OpenShift cluster service account for SWIFT section in the Pre-requisite and Installation Guide.