3 ms·
I'll be interested to see how this plays out. AuthN for users in k8s clusters is a bit of a pain point from what I've seen in a number of reviews I've done. T
by raesene9 8y ago
I'll be interested to see how this plays out. AuthN for users in k8s clusters is a bit of a pain point from what I've seen in a number of reviews I've done.
The in-built options (Basic auth, token auth, client cert) are not really scalable for a larger number of users, and the other options (webhook, OIDC) can be complex to setup.
So any relatively easy to use options for this would be welcome.
- SEJeff 8y agoOIDC tied to a LDAP directory is generally how you setup authentication for larger numbers of users. It really isn't that hard and has a dozen or so solutions with sensible config and operational footprints. Here is an example of how to do this (OIDC). Notice the short and concise documentation on how to set this up. It isn't too bad at all if you're running your own apiserver already: https://github.com/heptiolabs/gangway https://github.com/heptiolabs/gangway