docs(localenv): add details for tenant credentials for admin ui #3251
Conversation
localenv/README.md
Outdated
|
|
||
| The Admin UI requires a valid API secret and tenant id to make requests to the Admin APIs, which must be submitted via a form on the frontend. For our convenience, we log a link on MASE start that can be used to access the Admin UI and set the credentials automatically. The credentials used pull from the MASE's `SIGNATURE_SECRET` and `OPERATOR_TENANT_ID` environment variables. | ||
|
|
||
| We have secured access to Rafiki Admin using [Ory Kratos](https://www.ory.sh/docs/kratos/ory-kratos-intro); however, in our local playground setup we've chosen to disable authorization for easier development and testing interactions. |
There was a problem hiding this comment.
Not something to change per se, but I do wonder what purpose ORY Kratos serves anymore since tenant id/secret is itself a form of identity management
There was a problem hiding this comment.
It does seem superfluous.
There was a problem hiding this comment.
Actually removing Kratos might be something to bring up with the team later, as well.
localenv/README.md
Outdated
| In order to manage and view information about the Rafiki instance(s) you can use the [Rafiki Admin](https://rafiki.dev/admin/admin-user-guide) UI. We have secured access to Rafiki Admin using [Ory Kratos](https://www.ory.sh/docs/kratos/ory-kratos-intro); however, in our local playground setup we've chosen to disable authorization for easier development and testing interactions. | ||
| In order to manage and view information about the Rafiki instance(s) you can use the [Rafiki Admin](https://rafiki.dev/admin/admin-user-guide) UI. | ||
|
|
||
| The Admin UI requires a valid API secret and tenant id to make requests to the Admin APIs, which must be submitted via a form on the frontend. For our convenience, we log a link on MASE start that can be used to access the Admin UI and set the credentials automatically. The credentials used pull from the MASE's `SIGNATURE_SECRET` and `OPERATOR_TENANT_ID` environment variables. |
There was a problem hiding this comment.
A code snippet of the log that outputs the link might be good as an example of what to look for.
|
@brad-dow Added you because you made some edits here recently which moved a fair amount of the content out to rafiki.dev. I included this new requirement in the readme because it is pretty core info - it's a new basic requirement for using the admin UI so I wanted it front-and-center. |
Changes proposed in this pull request
Context
fixes: #3250
Checklist
fixes #numberuser-docslabel (if necessary)