SUSE Rancher

Overview

The SUSE Rancher integration connects your Rancher Manager server to Oneleet, syncing the users of the server as user account assets. This lets Oneleet monitor who has access to your Rancher server, what global roles they have, and how they sign in.

What does Oneleet monitor?

• Rancher users (user accounts), including each user’s global roles and whether they’re deactivated
• Whether your Rancher server has an external authentication provider, such as Okta or Microsoft Entra ID, enabled

Setup

To set up the SUSE Rancher integration, navigate to Integrations > Add integration > SUSE Rancher.

Oneleet connects with the API key of a Rancher user with a read-only custom global role, and your server’s domain. Sign in as an Administrator.

1. Copy the domain you open the Rancher UI at without https://, e.g. rancher.example.com. Include the port if your server uses one.
2. Click ☰ → Users & Authentication → Role Templates, and on the Global tab click Create Global Role. Add a rule with the verbs get and list on the resources users, globalroles, globalrolebindings, authconfigs, and settings in the API group management.cattle.io.
3. Under Users, create a user with the User-Base global permission and your new role.
4. Sign in as that user, open Account & API Keys from the user avatar, click Create API Key with No Scope, and copy the Bearer Token.
5. Paste both values into the form in Oneleet and click Connect.

Your Rancher server must be reachable from the internet over HTTPS with a trusted TLS certificate.