Hi@all,
I’m currently trying to get up to speed on Kubernetes and Nubus in the context of UCS. I’ve already read a few articles on the subject and think I understand the basic concept.
What’s not entirely clear to me yet is how UCS and Nubus interact with regard to identity and access management.
Suppose I set up the following test environment on Proxmox VE:
- VM1: UCS 5.2 Primary Directory Node (LDAP, Samba AD, Kerberos, Keycloak)
- VM2: Debian 13 with Kubernetes and Nubus running on it
In this scenario, which instance is the primary one for user and group management?
My current understanding is that UCS continues to manage users, groups, etc., and Nubus uses these identities to provision them to Kubernetes applications (e.g., OX8).
Is this assumption correct, or does Nubus follow a different architectural approach?
with best
sven