Authentication and authorization patterns for Rossoctl services
Scanned 9/20/2026
Install to Claude Code
Skills Directorynpx -y skills add rossoctl/rossoctl --skill auth --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Auth?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/rossoctl-auth)More formats (shields.io, HTML) on the badges page.
---
name: auth
description: Authentication and authorization patterns for Rossoctl services
---
# Authentication Skills
Skills for configuring OAuth2, Keycloak, and service-to-service authentication.
## Available Skills
| Skill | Description |
|-------|-------------|
| `auth:keycloak-confidential-client` | Create OAuth2 clients for service-to-service auth |
| `auth:mlflow-oidc-auth` | Configure MLflow with Keycloak OIDC + OTEL trace ingestion |
| `auth:otel-oauth2-exporter` | Configure OTEL collector with OAuth2 |
## Common Patterns
### Internal vs External URLs
For service-to-service communication, prefer internal URLs:
```
http://keycloak-service.keycloak.svc.cluster.local:8080
```
This avoids TLS certificate complexity.
### Client Credentials Flow
For backend services, use client credentials flow:
1. Create confidential client in Keycloak
2. Get token from token endpoint
3. Attach bearer token to requests
## Related Skills
- `openshift:trusted-ca-bundle`
- `istio:ambient-waypoint`
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
