Installation guide
|
Use installation specific passwords and ensure that passwords are being stored in a safe place. |
After the initial setup, several MACMA components are started as kubernetes pods:
| Deployment/StafefulSet Name | Docker Container Name | Docker Image | Description |
|---|---|---|---|
keycloak-22-statefulset |
keycloak-22-pod |
bcidockerregistry.azurecr.io/macma/macma-keycloak-mssql |
Keycloak service used by MACMA. This image comes with build in Oracle and MsSql support |
web-app-deployment |
web-app-pod |
bcidockerregistry.azurecr.io/macma/macma-webapp-backend |
MACMA Webapp contains UI and the UI backend |
macma-core-deployment |
macma-core-pod |
bcidockerregistry.azurecr.io/macma/macma-core |
MACMA Core component used for tenant and resource management |
The system can be access by two different user interfaces.
| Name | Address | Credentials | Information |
|---|---|---|---|
User interface |
https://<BASE_URL> |
Interface to manage MACMA |
|
Admin UI |
CONTEXT_PATH default: iam |
user: admin |
credentials as specified in this table, if not configured differently (see KEYCLOAK_USER, KEYCLOAK_PASSWORD in macma/macma-keycloak-mssql Configuration) |
The Keycloak administrative UI can be found at [BASE_URL]/auth/admin. The credentials for logging in as an administrative user are user: admin, password: password, if not configured differently. It is highly recommended to change the default credentials during the setup (see KEYCLOAK_USER, KEYCLOAK_PASSWORD in macma/macma-keycloak-mssql Configuration. Once authentication is performed, the Keycloak administration UI is visible.
| It is highly recommended that access to Keycloak administrative UI is limited to dedicated systems or local access. |
After a fresh installation, the following Realms are available:
-
"Keycloak" (master) - Realm: This is the default administrative realm which has administrative privileges over all other realms of the system. This realm should not be touched except for creating additional system-wide administrator users.
-
" MACMA_PROVIDER_TENANT_NAME" - ( MACMA_PROVIDER_TENANT_ID) - Realm: This is the provider tenant for MACMA. See default tenant at bootstrapping recommended configuration for details on how to configure a different provider tenant.