ibuildoss

4 ms·

1.
Controlling Access to APIs on Kubernetes with Ambassador and ORY Oathkeeper(ory.sh)
9 points by ibuildoss 8y ago|0 comments
2.
by ibuildoss 8y ago
That's a really good point! I've tracked this as https://github.com/ory/docs/issues/29 We're a very small team, so it might take a while for us to tackle this (especially because we mostly use
3.
by ibuildoss 8y ago
> Well you just lost me. You are developing IAM components and you can't get basic password management correct? email has nothing to do with it, we are well past the point where password managers are de rigueur, certainly for anyone
4.
by ibuildoss 8y ago
The day is coming to an end here, I'll try to monitor this thread but in case you don't get an answer from me any more, you will definitely get one in the community forums or chat by tomorrow: - Forums: https://communit
5.
by ibuildoss 8y ago
Yes, ORY Hydra has a flow that allows you to integrate with any identity solution, be it AD/LDAP, SAML, or your custom database-backed app!
6.
by ibuildoss 8y ago
Yes, this could definitely solve that. Another service which might be well suited for this specific task is: https://github.com/bitly/oauth2_proxy
7.
by ibuildoss 8y ago
It is extremely important to be sensitive to extremism of any kind, condemn extremist practices, beliefs, and views and take a stance against extremist ideologies. We do not share nor endorse extremist views nor "values", nor have
8.
by ibuildoss 8y ago
Good use cases, we in fact are looking at multi-tenancy or "realms" but have not progressed very far here as it can get quite complicated. One major issue with true multi-tenancy is obviously data isolation, so usually you don&#x2
9.
by ibuildoss 8y ago
That's an awesome list, thank you!
10.
by ibuildoss 8y ago
Awesome, following up in their slack :)
11.
by ibuildoss 8y ago
We're currently starting to work on ORY Hive (project name wip) which is going to be a fully functional identity management service (user registration, login, social sign in, password reset, MFA, ...) sort of along the lines of Auth0 o
12.
by ibuildoss 8y ago
Nice, I have heard about Ambassador before but did not have the time to look into it in detail. It is just amazing how much OSS is being created around the k8s/container ecosystem and I truly believe that it will greatly improve our li
13.
by ibuildoss 8y ago
What a clickbait title, the actual video has a totally different one. Please fix.
14.
by ibuildoss 8y ago
I have not used envoy extensively yet, but there are obviously many more options such as Apache2 + mod_oidc, Kong + oauth2 plugin, and so on. The main differentiator is that Oathkeeper is capable of performing more sophisticated permission
15.
by ibuildoss 8y ago
The idea of the ory ecosystem ( https://github.com/ory / https://www.ory.am ) is to build a reliable, cloud native suite of tools which allow you to solve simple and complex IAM (identity and access managem
16.
Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy(github.com)
174 points by ibuildoss 8y ago|82 comments
17.
by ibuildoss 8y ago
That's pretty cool, are there any bindings for e.g. Go out there?