bm idp openid

Description

The bm idp openid commands allow you to manage configurations to 3rd party OpenID Identity and Access Management (IAM) integrations.

Define configuration settings as an alternative to using environment variables when setting up an OpenID connection. The bm idp openid commands are only supported against Buckit deployments.

The bm idp openid command has the following subcommands:

Configuration Parameters

The bm idp openid subcommands support configuration parameters. The parameters define the server’s interaction with the IAM provider.

For a more detailed explanation of the configuration parameters, refer to the config setting documentation.

Syntax

add

Create a new set of configurations for an OpenID provider.

You can run the command multiple times to set up multiple OpenID providers.

When adding multiple OpenID providers, only one can be a JWT Claim-based provider. All others must be role-based providers.

EXAMPLE

The following example creates the configuration settings for the mybuckit deployment as defined in a new test-config setup for Dex integration.

 bm idp openid add mybuckit test-config                                        \
    client_id=minio-client-app                                                \
    client_secret=minio-client-app-secret                                     \
    config_url="http://localhost:5556/dex/.well-known/openid-configuration"   \
    scopes="openid,groups"                                                    \
    redirect_uri="http://127.0.0.1:10000/oauth_callback"                      \
    role_policy="consoleAdmin"

SYNTAX

The command has the following syntax:

bm [GLOBALFLAGS] idp openid add               \
                            ALIAS             \
                            [CFG_NAME]        \
                            [CFG_PARAM1]      \
                            [CFG_PARAM2]...

• Replace ALIAS with the alias of a Buckit deployment to configure for OpenID integration.

• Replace CFG_NAME with a unique string for this configuration. If not specified, the command creates default configuration values.

• Replace the [CFG_PARAM#] with each of the configuration setting key-value pairs in the format of PARAMETER="value".

update

Modify an existing set of configurations for an OpenID provider.

EXAMPLE

The following example changes two of the configuration settings for the mybuckit deployment as defined in the test-config setup for Dex integration.

bm idp openid update                      \
              mybuckit                     \
              test_config                 \
              scopes="openid,groups"      \
              role_policy="consoleAdmin"

SYNTAX

The command has the following syntax:

bm [GLOBALFLAGS] idp openid update           \
                            ALIAS            \
                            [CFG_NAME]       \
                            [CFG_PARAM1]     \
                            [CFG_PARAM2]...

• Replace ALIAS with the alias of a Buckit deployment to configure for OpenID integration.

• Replace CFG_NAME with a unique string for this configuration. If not specified, the command updates the default configuration.

• Replace the [CFG_PARAM#] with each of the configuration setting key-value pairs to update in the format of PARAMETER="value".

rm, remove

Remove an existing set of configurations for an OpenID provider.

EXAMPLE

The following example removes the test-config settings for the mybuckit deployment.

bm idp openid rm mybuckit test_config

SYNTAX

The command has the following syntax:

bm [GLOBALFLAGS] idp openid rm          \
                            ALIAS       \
                            [CFG_NAME]

• Replace ALIAS with the alias of a Buckit deployment to configure for OpenID integration.

• Replace CFG_NAME with a unique string for this configuration. If not specified, the command removes the default configurations.

ls, list

Outputs a list of existing configuration sets for OpenID providers.

EXAMPLE

The following example outputs a list of all OpenID configuration sets defined for the mybuckit deployment.

bm idp openid ls mybuckit

SYNTAX

The command has the following syntax:

bm [GLOBALFLAGS] idp openid ls ALIAS

• Replace ALIAS with the alias of a Buckit deployment to list OpenID integrations for.

info

Outputs the set of values defined for an existing set of server configurations for an OpenID provider.

EXAMPLE

The following example outputs the configuration settings defined for the test_config set of OpenID settings on the mybuckit deployment.

bm idp openid info mybuckit test_config

SYNTAX

The command has the following syntax:

bm [GLOBALFLAGS] idp openid info        \
                            ALIAS       \
                            [CFG_NAME]

• Replace ALIAS with the alias of a Buckit deployment to configure for OpenID integration.

• Replace CFG_NAME with a unique string for this configuration. If not specified, the information displays for the default server configuration.

enable

Begin using an existing set of configurations for an OpenID provider.

EXAMPLE

The following example enables the server configurations defined as test_config on the mybuckit deployment.

bm idp openid enable       \
              mybuckit      \
              test_config

SYNTAX

The command has the following syntax:

bm [GLOBALFLAGS] idp openid enable     \
                            ALIAS      \
                            [CFG_NAME]

• Replace ALIAS with the alias of a Buckit deployment to configure for OpenID integration.

• Replace CFG_NAME with a unique string for this configuration. If not specified, the command enables the default configuration values.

disable

Stop using a set of configurations for an OpenID provider.

EXAMPLE

The following example disables the server configurations defined as test_config on the mybuckit deployment.

bm idp openid disable      \
              mybuckit      \
              test_config

SYNTAX

The command has the following syntax:

bm [GLOBALFLAGS] idp openid disable       \
                            ALIAS         \
                            [CFG_NAME]

• Replace ALIAS with the alias of a Buckit deployment to configure for OpenID integration.

• Replace CFG_NAME with a unique string for this configuration. If not specified, the command disables the default configuration values.

Global Flags

This command supports any of the global flags.