Adding a system account

Deploy MechCloud Proxy for a REST API

Deploy either MechCloud OIDC or HTTPs Proxy depending on your requirement. See Choosing between MechCloud OIDC and HTTPs proxies for more details.

Registering a system account in MechCloud

Each system account registered in MechCloud OIDC proxy must have a unique id which is specified against Credentials ID while registering an account for the target system.

• Login to MechCloud console.

• Navigate to Infrastructure -> System Accounts.

• Click on New System Account button.

• Enter a name for the account.

• Choose Kubernetes in the dropdown.

• Enter the base url of Kubernetes API.

  • If you are using minikube and exposing its api using MechCloud HTTPS Proxy, then the base url of k8s api will be https://127.0.0.1:6443/minikube.

• (Optional) If K8s api is running with a self-signed certificate, then open the base url (e.g. https://127.0.0.1:6443) in the browser and accept the certificate warning so that MechCloud can communicate with the k8s api.

• Click on fetch version link. If you are able to see k8s version, it means MechCloud is able to communicate with your k8s api. Otherwise, you can debug it with the help of browser devtools.

• If the k8s api require authentication, then add an account for k8s api in this proxy. Finally, enter the value of id attribute, which you chose in MechCloud OIDC Proxy, against Credentials ID.

• If the api is not secured then toggle the Secured API button to off position.