You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: pages/public_cloud/containers_orchestration/managed_rancher_service/managing-iam-authentication/guide.en-gb.md
+19-13Lines changed: 19 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,7 @@
1
1
---
2
2
title: 'Configure access control using OVHcloud IAM on an OVHcloud Managed Rancher Service'
3
-
excerpt: 'Learn how to enable and manage OVHcloud IAM authentication to control access to your Managed Rancher Service (MRS) using centralized identities and roles.'
4
-
updated: 2025-10-16
3
+
excerpt: 'Learn how to enable and manage OVHcloud IAM authentication to control access to your Managed Rancher Service (MRS) using centralized identities and roles'
4
+
updated: 2025-11-04
5
5
---
6
6
7
7
<style>
@@ -55,13 +55,14 @@ Integrating IAM with your Rancher service ensures consistent access control acro
55
55
>
56
56
57
57
> [!tabs]
58
-
> Via the OVHcloud Control Panel (Comming soon)
58
+
> Via the OVHcloud Control Panel (coming soon)
59
59
>> > [!primary]
60
60
>> >
61
-
>> > Managing IAM from the OVHcloud Manager is not yet available and will be added in a future release.
61
+
>> > Managing IAM from the OVHcloud Control Panel is not yet available and will be added in a future release.
62
62
>> >
63
63
>>
64
64
> Via the OVHcloud API
65
+
>>
65
66
>> > [!api]
66
67
>> >
67
68
>> > @api {v2} /publicCloud PUT /publicCloud/project/{projectId}/rancher/{rancherId}
@@ -82,7 +83,7 @@ Integrating IAM with your Rancher service ensures consistent access control acro
82
83
>>
83
84
>> > [!primary]
84
85
>> >
85
-
>> > Make sure all information in the JSON (service name, plan, version) is correct. Using incorrect values will result in an error when activating or disabling IAM.
86
+
>> > Make sure all the information in the JSON (service name, plan, version) is correct. Using incorrect values will result in an error when activating or disabling IAM.
86
87
>> >
87
88
>>
88
89
>> Replace:
@@ -104,7 +105,6 @@ Integrating IAM with your Rancher service ensures consistent access control acro
104
105
>> Log in to the [OVHcloud Control Panel](/links/manager), navigate to the `Public Cloud`{.action} section, and select the relevant project. Then, in the left-hand menu under **Containers & Orchestration**, click on `Managed Rancher Service`{.action}.
105
106
>>
106
107
107
-
108
108
### Authentication using SSO with OVHcloud IAM users
109
109
110
110
Once IAM authentication is enabled on your Managed Rancher Service, access to the Rancher UI is managed via OVHcloud Single Sign-On (SSO). Users no longer log in with local Rancher credentials but authenticate directly using their OVHcloud IAM identity.
@@ -120,7 +120,7 @@ To log in via SSO:
120
120
121
121
{.thumbnail}
122
122
123
-
- You will be redirected to the Managed Rancher Service authentication page.
123
+
- You will be redirected to the Managed Rancher Service authentication page.
124
124
125
125
/// details | No user has ever logged in locally
126
126
@@ -140,7 +140,7 @@ Replace:
140
140
141
141
Copy the returned password, then paste it on the authentication page.
142
142
143
-
Make sure to check the box to accept the `End User License Agreement & Terms & Conditions`{.action}, then click Continue.
143
+
Make sure to check the box to accept the `End User License Agreement & Terms & Conditions`{.action}, then click `Continue`{.action}.
144
144
145
145
You can now log out and proceed with your normal workflow.
146
146
@@ -171,7 +171,7 @@ OVHcloud IAM provides three predefined roles for managing access to your Managed
171
171
>
172
172
> **standard** role: Standard users can create new clusters and manage clusters and projects they have been granted access to.
173
173
>
174
-
> **ovhRestrictedAdmin** role: OVH Restricted Admins have full control over all resources in downstream clusters but do not have access to the local cluster.
174
+
> **ovhRestrictedAdmin** role: OVHcloud Restricted Admins have full control over all resources in downstream clusters but do not have access to the local cluster.
175
175
>
176
176
177
177
These roles are assigned through IAM policies. To create and configure a policy, log in to the [OVHcloud Control Panel](/links/manager) and navigate to the `Identity, Security & Operations`{.action} section. Then, in the left-hand menu under **Identity and Access management**, click on `Policies`{.action} and click the `Create a policy`{.action} button.
@@ -184,12 +184,12 @@ Define users and groups, name your policy, add the users you want to include and
184
184
185
185
Set permissions for MRS:
186
186
187
-
- In the `Product types` section, select `Public Cloud / Managed Rancher Service (MRS) project`.
188
-
- In the `Resources` section, choose the specific MRS service to which the policy will apply.
187
+
- In the `Product types`{.action} section, select `Public Cloud / Managed Rancher Service (MRS) project`{.action}.
188
+
- In the `Resources`{.action} section, choose the specific MRS service to which the policy will apply.
@@ -198,4 +198,10 @@ Expand `Public Cloud / Managed Rancher Service (MRS) project` and select the des
198
198
To go further you can look at our guides on:
199
199
200
200
- [Managing users and projects](/pages/public_cloud/containers_orchestration/managed_private_registry/managing-users-and-projects).
201
-
- [Creating and using a private image](/pages/public_cloud/containers_orchestration/managed_private_registry/creating-and-using-a-private-image).
201
+
- [Creating and using a private image](/pages/public_cloud/containers_orchestration/managed_private_registry/creating-and-using-a-private-image).
202
+
203
+
If you need training or technical assistance to implement our solutions, contact your sales representative or click on [this link](/links/professional-services) to get a quote and ask our Professional Services experts for assisting you on your specific use case of your project.
204
+
205
+
Our team remains available on our dedicated Discord Channel, do not hesitate to join and reach us : <https://discord.gg/ovhcloud>. Ask questions, provide feedback and interact directly with the team that builds our Container and Orchestration services.
0 commit comments