User Impersonation in HPC Workflows

For general background information on this topic, see Authentication and Authorization.

The Autoscaling Service can be run with or without user impersonation.

An impersonation client named rep-impersonation is defined in Keycloak. It allows the impersonation of other users and has a special security configuration set up by default. It requires special authentication for the autoscaling feature. This can be generated on initial startup through the Keycloak Admin Console.

Another client named rep-cli is also available for single user authentication. This client does not support impersonation.