4 ms·
+10000 User admin and the reliance on client-cert authentication is one of the biggest weaknesses I see in k8s security at the moment. There are obviously oth
by raesene9 8y ago
+10000
User admin and the reliance on client-cert authentication is one of the biggest weaknesses I see in k8s security at the moment.
There are obviously other options like OIDC available, but it can be tricky to set up and isn't on by default, so instead client certs are used for user auth. and given the lack of certificate revocation, they're really not suited for that.