📄️ CLI Guide
Install the alma CLI, sign in to an AlmaForge cluster, enable shell completion, and use the kubectl-style CRUD workflow.
📄️ RBAC Guide
Configuration fields for an AlmaForge Role, the resource that drives role-based access control.
📄️ Workload Identity
How non-human workloads use platform identities to authenticate to AlmaForge and receive short-lived certificates without a separate AlmaForge join secret.
📄️ Just-in-Time Access
How just-in-time access requests work in AlmaForge. Users hold minimum permanent roles, request bounded elevation, and reviewers approve through the CLI or Web UI.
📄️ Credential Export
AlmaForge Credential Export keeps short-lived credentials available to clients that read them from stable directory paths or Kubernetes Secret keys.
📄️ Server Access
Learn how to give engineers SSO-backed SSH access to Linux servers across cloud and on-prem with AlmaForge: short-lived certificates, label-driven RBAC, terminal replay, and no long-lived user SSH keys to rotate.
📄️ Kubernetes Access
Learn how to set up AlmaForge Kubernetes access with SSO, native Kubernetes RBAC, short-lived credentials, and kubectl across EKS, GKE, AKS, and self-hosted clusters through one private, audited access plane.
🗃️ Database Access
12 items
📄️ Application Access
Learn how to publish internal web apps, APIs, and TCP services through AlmaForge with SSO, label-driven RBAC, and identity propagation, without exposing the upstream to the public internet.