Skip to main content

Credential Management

Location: Top-right profile icon → Credentials section. Permission: All logged-in users.

Manage credentials (K8s kubeconfig, Docker connection info, etc.) used in KIOPS. Access through the credentials section in the profile dropdown.

Credential Types​

Credentials managed in KIOPS are divided into two categories based on storage method.

Server-Stored Credentials​

The following three credential stores are kept on the KIOPS server.

  • Server Credentials: Credentials used for server authentication such as SSH (grouped by host:port:user).
  • Image Registry Credentials: Access information for image registries (Docker, Harbor, etc.).
  • Source Repository Credentials (Git PAT): GitLab/GitHub Personal Access Tokens.

Browser-Stored Credentials (SSH Credentials)​

SSH credentials (passwords, private keys) used for server access are stored only in your current browser for security and are never sent to the KIOPS server.

  • SSH Password: Account password for device access.
  • SSH Private Key: PEM key files in RSA, Ed25519, or ECDSA format (.pem, .key)
  • When performing operations (deployment, system info collection, etc.), select the authentication method in the SSH credentials input modal.
  • Once entered, credentials are saved in the browser and automatically loaded for subsequent operations.
  • If you clear your browser data, SSH credentials must be re-entered.
SSH Authentication Method Selection

KIOPS supports two SSH authentication methods: password authentication and SSH key authentication. You can switch between them using the authentication method toggle in the credentials input modal. In multi-hop connections, each hop can use a different authentication method.

Key Features​

The Credentials section in the profile dropdown offers three action buttons.

  • View Credentials: Opens a modal showing every stored credential.
  • Import Credentials: Uploads a previously exported JSON file to register credentials in bulk.
  • Export Credentials: Downloads the credentials you currently hold as a JSON file for backup or to move them to another environment.

View Credentials​

Click View Credentials to open the modal, where credential stores are shown across 5 tabs.

  • Servers: Displays stored SSH credentials grouped by host:port:user. Passwords can be shown/hidden with the eye icon toggle. Connected services and infrastructure info is also displayed.
  • Registries: Shows access info for image registries such as Docker/Harbor (URL, username, and connected services).
  • DB Connections (dbConnectionSecrets): Manages database connection secrets such as DB username and password.
  • Docker Hub (dockerHubAuth): Manages Docker Hub authentication (used to avoid rate limits, etc.).
  • Source Repositories (Git PAT): Shows the Personal Access Tokens used for GitLab/GitHub.
Cleaning Up Credentials

Use the Clean Up Duplicates button at the bottom of the credentials viewer modal to remove unnecessary duplicate entries, or the Reset button to clear all stored credentials.

Import / Export Credentials (JSON)​

Use these actions to move credentials between different KIOPS environments or to back them up to a safe location.

  • Export: Click the Export Credentials button to download the currently stored credentials as a JSON file. Keep the file safe, since it may contain sensitive material.
  • Import: Click the Import Credentials button and choose a previously exported JSON file. The credentials are registered in bulk; any conflicts with existing credentials are resolved according to the prompts shown.
Protect Exported JSON Files

Exported JSON files may contain sensitive information such as passwords and tokens. Do not send them through channels with exposure risk like email or shared drives.

How to Access​

  1. Click the profile icon in the top-right corner.
  2. The dropdown shows Edit My Info, Plan (shown to non-administrators only), and Logout items, along with the VPN Status and Credentials sections.
  3. In the Credentials section, choose View Credentials, Import Credentials, or Export Credentials depending on what you need.