4 ms·
thanks for this input. During my research I encountered several existing solutions but most of them seemed a bit overkill for my purposes (testing kubernetes in
by _juckerf 9y ago
thanks for this input. During my research I encountered several existing solutions but most of them seemed a bit overkill for my purposes (testing kubernetes in our company). So I developed a really lightweight solution.
E.g. with dex and kuberos one has to set up two additional services just for something simple like ldap auth (ok, with kube-ldap one has to setup one additional service too^^).
On the other hand I really like the advantages of an oidc-based login (automatic token refresh, natively built-in to kubernetes...), so this will probably be a way to go when our kubernetes setup is going to reach maturity.
- SEJeff 9y agoYup, this is what CoreOS production tectonic clusters (and many open source clusters) use for authentication. That said, kube-ldap is still really cool. Thanks for releasing it!