[[infinispan-credentials]]
. Configure the credential to access the Infinispan cluster.
+
Keycloak needs this credential to be able to authenticate with the Infinispan cluster.
The following `identities.yaml` file sets the username and password with admin permissions
+
[source,yam,subs="+attributes"]
----
credentials:
  - username: developer
    password: {hr-password}
    roles:
      - admin
----
+
The `identities.yaml` could be set in a secret as one of the following:

* As a Kubernetes Resource:
+
.Credential Secret
[.wrap]
[source,yaml]
----
include::../../examples/generated/ispn-single.yaml[tag=infinispan-credentials]
----
<1> The `identities.yaml` from the previous example base64 encoded.
+
* Using the CLI
+
[source,bash]
----
kubectl create secret generic connect-secret --from-file=identities.yaml
----
+
Check https://infinispan.org/docs/infinispan-operator/main/operator.html#configuring-authentication[Configuring Authentication] documentation for more details.