Story Tag: authentication

Stories Tag: authentication

API Authentication Using Istio Ingress Gateway, OAuth2-Proxy and Keycloak | by Senthil Raja Chermapandian | Aug, 2021 | Medium

admin 3 weeks ago in

In my previous blog post titled “API Access Control using Istio Ingress Gateway”, I explained how to implement an API access control solution using Istio Ingress Gateway. Istio uses JWT Access token attached to the API request, to validate the request and enforce access control (authorization) policies. This determine whether the request should be allowed or denied. The solution’s prerequisites were a successfully authenticated user…

Kubectl Login: Solving Authentication For Kubernetes | Medium

admin 2 months ago in

by Adeyinka Adegbenro Kubernetes authentication means validating the identity of who or what is sending a request to the Kubernetes server. A request can originate from a pod, within a cluster, or from a human user. Kubernetes authentication is needed to secure an application by validating the identity of a user. Kubernetes does not offer any native implementation for creating and managing users, which means…

Kubernetes authentication using SAML2 | by M.Milev | Medium

admin 2 months ago in

Kubernetes is a great system. It allows very powerful and sophisticated container orchestration. By default the entities, which can perform actions inside a Kubernetes cluster, are either service accounts (ServiceAccount), or REST API requests with a valid client certificate. The service accounts use tokens stored in secrets in each namespace. I deliberately don’t use the word “Users”. By default there is no resource definition for…

Kubernetes Authentication using LDAP and OAuth2 | by Marios Manoukos | Upstream Engineering | Jul, 2021 | Medium

admin 2 months ago in

From a DevOps perspective, working for a well established company such as Upstream, means bringing two different worlds together. Combining legacy with new software, old ways to do stuff with new ideas, a huge LDAP database and many production architecture transformations. As one can tell, production deployments infrastructure has evolved throughout the years, from bare metal, to Virtual Machines and now to Containerized applications running…

Kubernetes — Authenticating to your cluster using Keycloak | by Aaron Pejakovic | Jul, 2021 | Medium

admin 3 months ago in

Accessing a Kubernetes cluster and its resources is done via API calls to the Kubernetes API. Whenever we make a call to the API server it first needs to be authenticated and then once it is authenticated, it needs to be authorized. The authentication part ensures the system knows about the user and the authorization checks and validates whether the user has the correct permissions…

Enabling Kubernetes Dashboard over HTTPS with RBAC Authorization | by Zachi Nachshon | Jun, 2021 | Medium

admin 4 months ago in

Installing Kubernetes dashboard and enabling access via ingress controller with role-based access control (RBAC) authorization. · Dashboard ∘ Prepare ∘ Install ∘ Uninstall· Ingress ∘ Certificate ∘ Configure ∘ Remove Access· Authorization ∘ Admin User ∘ Cluster Admin User ∘ Read-Only User ∘ Access via kubeconfig· Summary Tip: It is advised to use the dashboard in a read-only mode with least privilege users permissions. Although…

ArgoCD: users, access, and RBAC. ArgoCD users management, and access… | by Arseny Zinchenko (setevoy) | May, 2021 | ITNEXT

admin 4 months ago in

ArgoCD has two types of users — local, that are set in the argocd-cm ConfigMap, and SSO. Below, we will speak about local user management, and in the next chapter will see how to integrate ArgoCD and Okta, because local users can’t be grouped in groups. See the documentation on the Local users/accounts page. For any users, their permissions can be configured with roles, that…

Quick and Dirty Token / API Key Authentication in Ambassador | by Leonid Makarov | Mar, 2021 | Medium

admin 6 months ago in

While exploring Ambassador Edge Stack as an all-in-one ingress controller + API gateway + automatic Let’sEncrypt certs solution for a Kubernetes cluster, I wanted to add simple authentication for one of the endpoints. Ambassador’s Basic Authentication option is well documented but requires spinning up an external authentication service 😱. That does not pass the “simple” bar. After researching this further, I settled on the following…

Openshift: Creating a project and authenticating an ldap group | by Haluk KARAKAYA | Jan, 2021 | Medium

admin 8 months ago in

In this article, I will explain how we can authenticate an ldap group for a openshift project(namespace). For this, we should sync ldap groups with openshift platform.First, lets create a namespace named projectname. and two file named whitelist.txt and ldap_nested_sync.yaml. Sync with the command below. And add role as you wish for this group and project. You can check the authentication.