Skip to content

TUTORIALS

Haven tutorials

Step-by-step console recipes for operators. User-facing manuals also live on zyvor.dev:

Verify deploy

Deploy (or refresh) the console on the lab host and walk through the main surfaces:

./scripts/deploy-remote.sh <ephemeral-ip> operator
open http://<ephemeral-ip>:30742/login

Sign in → Command Deck (connected + Ready) → Planes → Atlas.

Endpoints and SSH: lab-host.md. Auth modes: console.md.

Create realm + user

  1. /realms → Create realm
  2. Open realm → Users → Invite user (optional temp password)
  3. Set password for a permanent credential

Production profile (future): realm changes may route through Approvals — see ux.md.

Mint client secret

  1. Realm → Clients → Mint client (confidential)
  2. Secret or Rotate → copy once

For public PKCE clients (no secret), register redirect URIs in Keycloak directly. OIDC wiring example: lab-host.md → Wire OIDC clients.

Passwords

What Where
Console sign-in Settings → Passwords → Change console password
Keycloak master admin Settings → Passwords → Change Keycloak admin
Realm user Realm → Users → Set password

Persist console / Keycloak admin changes in haven-keycloak-admin (or HAVEN_CONSOLE_*) before pod restart.