Post-Installation TasksΒΆ
Complete the following post-installation tasks to finalize system setup:
Verify web UI health and connectivity by opening the following URL in a browser (you may need to accept a certificate security exception when using the default certificate):
https://<OAM-Floating-IP-Address>:8443
Review and configure optional platform services for application workloads. For more information, refer to Application Reference.
Configure authentication and user accounts.
The
oidc-auth-appsapplication is applied by default and is preconfigured to use the local LDAP backend for SSH/Ansible access and Kubernetes (kubectl) authentication. If you need to integrate with an external identity provider (IdP), configure optional Dex/OIDC connectors accordingly. For more information, see Kubernetes Authentication & Authorization.Create Keystone user accounts for REST APIs, CLI, Horizon, and the local registry as needed. For more information, see User Account Types.
Update the firewall configuration if required. For details on the default firewall settings and guidance on how to modify or extend them, refer to Network Planning Firewall Options.
Configure HTTPS access for external connections. The system defaults to HTTPS access using a self-signed certificate if no certificate is supplied during installation. For production environments, obtain and supply a certificate signed by an accredited certificate authority (CA) prior to installation.
For more information on planning and configuring HTTPS certificates, refer to HTTPS Access Planning.
Review and apply additional security settings. Follow procedures in Security to configure authentication, authorization, and system hardening.
Enable remote CLI access to Kubernetes and platform services. For more information, refer to Remote CLI Access.
Complete system setup by reviewing System Configuration for any remaining platform and service tasks.
Complete additional operational tasks as described in Admin Tasks.