Authentication Skills

SkillSecurity

Authentication and authorization patterns for Rossoctl services

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the Authentication Skills skill

What this skill tells your AI

The instructions your AI receives, as published by rossoctl/rossoctl in .claude/skills/auth/SKILL.md and read by ahel’s review.

Skills for configuring OAuth2, Keycloak, and service-to-service authentication.

Available Skills

SkillDescription
auth:keycloak-confidential-clientCreate OAuth2 clients for service-to-service auth
auth:mlflow-oidc-authConfigure MLflow with Keycloak OIDC + OTEL trace ingestion
auth:otel-oauth2-exporterConfigure OTEL collector with OAuth2

Common Patterns

Internal vs External URLs

For service-to-service communication, prefer internal URLs:

http://keycloak-service.keycloak.svc.cluster.local:8080

This avoids TLS certificate complexity.

Client Credentials Flow

For backend services, use client credentials flow:

  1. Create confidential client in Keycloak
  2. Get token from token endpoint
  3. Attach bearer token to requests

Related Skills

  • openshift:trusted-ca-bundle
  • istio:ambient-waypoint

Signals

GitHub stars
300
Forks
107
Last commit
Sep 2026
Advanced
Catalog kind
skill
Gateway key
auth-rossoctl
Source
github.com/rossoctl/rossoctl