<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Credential help when adding brownfield Kubernetes Clusters to Morpheus in HPE Morpheus Enterprise Software</title>
    <link>https://community.hpe.com/t5/hpe-morpheus-enterprise-software/credential-help-when-adding-brownfield-kubernetes-clusters-to/m-p/7247910#M1084</link>
    <description>&lt;P&gt;I recently wanted to add my lab K8s cluster to Morpheus.  I ended up having to create a service account for Morpheus to fully ingest the brownfield K8s cluster.  Prior to creating this account I had issues listing all namespaces and other resources.&lt;/P&gt;
&lt;P&gt;Here is what I ended up having to do to create an account and get connected:&lt;/P&gt;
&lt;H1&gt;
&lt;A name="create-service-account-for-morpheus-to-connect-1" class="anchor" href="#create-service-account-for-morpheus-to-connect-1"&gt;&lt;/A&gt;Create Service Account for Morpheus to Connect&lt;/H1&gt;
&lt;P&gt;&lt;CODE style="background : #f0f1f2;"&gt;kubectl create serviceaccount morpheus&lt;/CODE&gt;&lt;/P&gt;
&lt;H1&gt;
&lt;A name="create-role-binding-2" class="anchor" href="#create-role-binding-2"&gt;&lt;/A&gt;Create Role Binding&lt;/H1&gt;
&lt;PRE style="background : #f0f1f2;"&gt;&lt;CODE class="lang-auto"&gt; kubectl create clusterrolebinding morpheus-admin \
 --clusterrole=cluster-admin --serviceaccount=default:morpheus \
 --namespace=default
&lt;/CODE&gt;&lt;/PRE&gt;
&lt;H1&gt;
&lt;A name="gather-api-url-3" class="anchor" href="#gather-api-url-3"&gt;&lt;/A&gt;Gather API URL&lt;/H1&gt;
&lt;P&gt;&lt;CODE style="background : #f0f1f2;"&gt;kubectl config view --minify | grep server | cut -f 2- -d ":" | tr -d " "&lt;/CODE&gt;&lt;/P&gt;
&lt;H1&gt;
&lt;A name="gather-service-account-token-4" class="anchor" href="#gather-service-account-token-4"&gt;&lt;/A&gt;Gather Service Account Token&lt;/H1&gt;
&lt;PRE style="background : #f0f1f2;"&gt;&lt;CODE class="lang-auto"&gt;SECRET_NAME=$(kubectl get secrets | grep ^morpheus | cut -f1 -d ' ')
kubectl describe secret $SECRET_NAME | grep -E '^token' | cut -f2 -d':' | tr -d " "
&lt;/CODE&gt;&lt;/PRE&gt;
&lt;H1&gt;
&lt;A name="add-brownfield-k8s-5" class="anchor" href="#add-brownfield-k8s-5"&gt;&lt;/A&gt;Add Brownfield K8s&lt;/H1&gt;
&lt;P&gt;Infra &amp;gt; Clusters &amp;gt; +Add Clusters &amp;gt; External Kubernetes Clusters&lt;/P&gt;
&lt;OL&gt;
&lt;LI&gt;Assign Group&lt;/LI&gt;
&lt;LI&gt;Assign:&lt;BR /&gt;
Cluster Name&lt;BR /&gt;
Resource Name&lt;BR /&gt;
Description (Optional)&lt;BR /&gt;
Visibility&lt;BR /&gt;
Labels (Optional)&lt;/LI&gt;
&lt;LI&gt;Assign&lt;BR /&gt;
Layout&lt;BR /&gt;
API URL&lt;BR /&gt;
API Token&lt;/LI&gt;
&lt;/OL&gt;
&lt;H1&gt;
&lt;A name="additional-links-6" class="anchor" href="#additional-links-6"&gt;&lt;/A&gt;Additional Links:&lt;/H1&gt;
&lt;ASIDE class="onebox allowlistedgeneric" data-onebox-src="https://kubernetes.io/docs/reference/access-authn-authz/rbac/"&gt;
  &lt;HEADER class="source"&gt;
      &lt;span class="lia-inline-image-display-wrapper" image-alt="fe8523a3ec819b4c4a5eef411544b9384f227231.png"&gt;&lt;img src="https://community.hpe.com/t5/image/serverpage/image-id/149832iADD5170B06E28D4A/image-size/large?v=v2&amp;amp;px=2000" role="button" title="fe8523a3ec819b4c4a5eef411544b9384f227231.png" alt="fe8523a3ec819b4c4a5eef411544b9384f227231.png" /&gt;&lt;/span&gt;

      &lt;A href="https://kubernetes.io/docs/reference/access-authn-authz/rbac/" target="_blank" rel="noopener"&gt;Kubernetes&lt;/A&gt;
  &lt;/HEADER&gt;

  &lt;span class="lia-inline-image-display-wrapper" image-alt="fe8523a3ec819b4c4a5eef411544b9384f227231.png"&gt;&lt;img src="https://community.hpe.com/t5/image/serverpage/image-id/149832iADD5170B06E28D4A/image-size/large?v=v2&amp;amp;px=2000" role="button" title="fe8523a3ec819b4c4a5eef411544b9384f227231.png" alt="fe8523a3ec819b4c4a5eef411544b9384f227231.png" /&gt;&lt;/span&gt;

  &lt;P&gt;Role-based access control (RBAC) is a method of regulating access to computer or network resources based on the roles of individual users within your organization.
RBAC authorization uses the rbac.authorization.k8s.io API group to drive authorization...&lt;/P&gt;


  &lt;/ASIDE&gt;

  &lt;DIV class="onebox-metadata"&gt;
    
    
  &lt;/DIV&gt;

  &lt;DIV style="clear: both"&gt;&lt;/DIV&gt;</description>
    <pubDate>Wed, 25 May 2022 19:15:33 GMT</pubDate>
    <dc:creator>cbunge</dc:creator>
    <dc:date>2022-05-25T19:15:33Z</dc:date>
    <item>
      <title>Credential help when adding brownfield Kubernetes Clusters to Morpheus</title>
      <link>https://community.hpe.com/t5/hpe-morpheus-enterprise-software/credential-help-when-adding-brownfield-kubernetes-clusters-to/m-p/7247910#M1084</link>
      <description>&lt;P&gt;I recently wanted to add my lab K8s cluster to Morpheus.  I ended up having to create a service account for Morpheus to fully ingest the brownfield K8s cluster.  Prior to creating this account I had issues listing all namespaces and other resources.&lt;/P&gt;
&lt;P&gt;Here is what I ended up having to do to create an account and get connected:&lt;/P&gt;
&lt;H1&gt;
&lt;A name="create-service-account-for-morpheus-to-connect-1" class="anchor" href="#create-service-account-for-morpheus-to-connect-1"&gt;&lt;/A&gt;Create Service Account for Morpheus to Connect&lt;/H1&gt;
&lt;P&gt;&lt;CODE style="background : #f0f1f2;"&gt;kubectl create serviceaccount morpheus&lt;/CODE&gt;&lt;/P&gt;
&lt;H1&gt;
&lt;A name="create-role-binding-2" class="anchor" href="#create-role-binding-2"&gt;&lt;/A&gt;Create Role Binding&lt;/H1&gt;
&lt;PRE style="background : #f0f1f2;"&gt;&lt;CODE class="lang-auto"&gt; kubectl create clusterrolebinding morpheus-admin \
 --clusterrole=cluster-admin --serviceaccount=default:morpheus \
 --namespace=default
&lt;/CODE&gt;&lt;/PRE&gt;
&lt;H1&gt;
&lt;A name="gather-api-url-3" class="anchor" href="#gather-api-url-3"&gt;&lt;/A&gt;Gather API URL&lt;/H1&gt;
&lt;P&gt;&lt;CODE style="background : #f0f1f2;"&gt;kubectl config view --minify | grep server | cut -f 2- -d ":" | tr -d " "&lt;/CODE&gt;&lt;/P&gt;
&lt;H1&gt;
&lt;A name="gather-service-account-token-4" class="anchor" href="#gather-service-account-token-4"&gt;&lt;/A&gt;Gather Service Account Token&lt;/H1&gt;
&lt;PRE style="background : #f0f1f2;"&gt;&lt;CODE class="lang-auto"&gt;SECRET_NAME=$(kubectl get secrets | grep ^morpheus | cut -f1 -d ' ')
kubectl describe secret $SECRET_NAME | grep -E '^token' | cut -f2 -d':' | tr -d " "
&lt;/CODE&gt;&lt;/PRE&gt;
&lt;H1&gt;
&lt;A name="add-brownfield-k8s-5" class="anchor" href="#add-brownfield-k8s-5"&gt;&lt;/A&gt;Add Brownfield K8s&lt;/H1&gt;
&lt;P&gt;Infra &amp;gt; Clusters &amp;gt; +Add Clusters &amp;gt; External Kubernetes Clusters&lt;/P&gt;
&lt;OL&gt;
&lt;LI&gt;Assign Group&lt;/LI&gt;
&lt;LI&gt;Assign:&lt;BR /&gt;
Cluster Name&lt;BR /&gt;
Resource Name&lt;BR /&gt;
Description (Optional)&lt;BR /&gt;
Visibility&lt;BR /&gt;
Labels (Optional)&lt;/LI&gt;
&lt;LI&gt;Assign&lt;BR /&gt;
Layout&lt;BR /&gt;
API URL&lt;BR /&gt;
API Token&lt;/LI&gt;
&lt;/OL&gt;
&lt;H1&gt;
&lt;A name="additional-links-6" class="anchor" href="#additional-links-6"&gt;&lt;/A&gt;Additional Links:&lt;/H1&gt;
&lt;ASIDE class="onebox allowlistedgeneric" data-onebox-src="https://kubernetes.io/docs/reference/access-authn-authz/rbac/"&gt;
  &lt;HEADER class="source"&gt;
      &lt;span class="lia-inline-image-display-wrapper" image-alt="fe8523a3ec819b4c4a5eef411544b9384f227231.png"&gt;&lt;img src="https://community.hpe.com/t5/image/serverpage/image-id/149832iADD5170B06E28D4A/image-size/large?v=v2&amp;amp;px=2000" role="button" title="fe8523a3ec819b4c4a5eef411544b9384f227231.png" alt="fe8523a3ec819b4c4a5eef411544b9384f227231.png" /&gt;&lt;/span&gt;

      &lt;A href="https://kubernetes.io/docs/reference/access-authn-authz/rbac/" target="_blank" rel="noopener"&gt;Kubernetes&lt;/A&gt;
  &lt;/HEADER&gt;

  &lt;span class="lia-inline-image-display-wrapper" image-alt="fe8523a3ec819b4c4a5eef411544b9384f227231.png"&gt;&lt;img src="https://community.hpe.com/t5/image/serverpage/image-id/149832iADD5170B06E28D4A/image-size/large?v=v2&amp;amp;px=2000" role="button" title="fe8523a3ec819b4c4a5eef411544b9384f227231.png" alt="fe8523a3ec819b4c4a5eef411544b9384f227231.png" /&gt;&lt;/span&gt;

  &lt;P&gt;Role-based access control (RBAC) is a method of regulating access to computer or network resources based on the roles of individual users within your organization.
RBAC authorization uses the rbac.authorization.k8s.io API group to drive authorization...&lt;/P&gt;


  &lt;/ASIDE&gt;

  &lt;DIV class="onebox-metadata"&gt;
    
    
  &lt;/DIV&gt;

  &lt;DIV style="clear: both"&gt;&lt;/DIV&gt;</description>
      <pubDate>Wed, 25 May 2022 19:15:33 GMT</pubDate>
      <guid>https://community.hpe.com/t5/hpe-morpheus-enterprise-software/credential-help-when-adding-brownfield-kubernetes-clusters-to/m-p/7247910#M1084</guid>
      <dc:creator>cbunge</dc:creator>
      <dc:date>2022-05-25T19:15:33Z</dc:date>
    </item>
    <item>
      <title>Re: Credential help when adding brownfield Kubernetes Clusters to Morpheus</title>
      <link>https://community.hpe.com/t5/hpe-morpheus-enterprise-software/credential-help-when-adding-brownfield-kubernetes-clusters-to/m-p/7247911#M1085</link>
      <description>&lt;P&gt;Nice ! i added Openshift into Morpheus by External K8s&lt;BR /&gt;
&lt;/P&gt;&lt;DIV class="lightbox-wrapper"&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="Screenshot from 2023-06-06 11-12-00"&gt;&lt;img src="https://community.hpe.com/t5/image/serverpage/image-id/149783iA9C4B37840EC677E/image-size/large?v=v2&amp;amp;px=2000" role="button" title="73fce681b636186fb0129cd4db5c5d1d94131152.png" alt="73fce681b636186fb0129cd4db5c5d1d94131152.png" /&gt;&lt;/span&gt;&lt;/DIV&gt;&lt;BR /&gt;
&lt;DIV class="lightbox-wrapper"&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="Screenshot from 2023-06-06 11-11-06"&gt;&lt;img src="https://community.hpe.com/t5/image/serverpage/image-id/149618iFE87BC8EC7F04D18/image-size/large?v=v2&amp;amp;px=2000" role="button" title="a8b0899cc2c7b159dec62164fa5fdca28fdc345b.png" alt="a8b0899cc2c7b159dec62164fa5fdca28fdc345b.png" /&gt;&lt;/span&gt;&lt;/DIV&gt;&lt;P&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 06 Jun 2023 04:12:19 GMT</pubDate>
      <guid>https://community.hpe.com/t5/hpe-morpheus-enterprise-software/credential-help-when-adding-brownfield-kubernetes-clusters-to/m-p/7247911#M1085</guid>
      <dc:creator />
      <dc:date>2023-06-06T04:12:19Z</dc:date>
    </item>
  </channel>
</rss>

