Story Tag: authentication

Stories Tag: authentication

Quick and Dirty Token / API Key Authentication in Ambassador | by Leonid Makarov | Mar, 2021 | Medium

admin 1 month ago in

While exploring Ambassador Edge Stack as an all-in-one ingress controller + API gateway + automatic Let’sEncrypt certs solution for a Kubernetes cluster, I wanted to add simple authentication for one of the endpoints. Ambassador’s Basic Authentication option is well documented but requires spinning up an external authentication service 😱. That does not pass the “simple” bar. After researching this further, I settled on the following…

Openshift: Creating a project and authenticating an ldap group | by Haluk KARAKAYA | Jan, 2021 | Medium

admin 3 months ago in

In this article, I will explain how we can authenticate an ldap group for a openshift project(namespace). For this, we should sync ldap groups with openshift platform.First, lets create a namespace named projectname. and two file named whitelist.txt and ldap_nested_sync.yaml. Sync with the command below. And add role as you wish for this group and project. You can check the authentication.

Kubernetes Authentication & Authorization 101 | by Stefanie Lai | Dec, 2020 | Medium

admin 4 months ago in

If we want to build a system with user modules, Authentication and Authorization are something that we can never ignore, though they could be fuzzy to understand. Authentication (from Greek: αὐθεντικός authentikos, “real, genuine”, from αὐθέντης authentes, “author”) is the act of proving an assertion, such as the identity of a computer system user — from wiki Authorization is the function of specifying access rights/privileges…

Service to Service Authentication on Kubernetes | by Nick Meves | In the Weeds | Nov, 2020 | Medium

admin 5 months ago in

Service to service authentication is hard. Or more accurately, service to service authentication done properly and securely is hard. And if you want to support human users with SSO at the same time, well that’s extremely hard. Luckily, Kubernetes provides functionality to make the process easier: projected service account tokens. Taking some lessons from AWS’s IAM Roles for Service Accounts (IRSA) architecture, you can morph…

Part 2: Centralize Your Kubernetes Authentication Mechanisms Without Writing Any YAML | by Kelsey Evans | Oct, 2020 | Ambassador...

admin 6 months ago in

Keycloak is a common Identity Provider solution for cloud native developers looking to centralize their authentication mechanisms across Kubernetes microservices. Installing Keycloak and configuring it with your ingress controller is often a time-consuming and unfulfilling task for many developers. In the first part of this series, we wrote a step-by-step tutorial on how to set up centralized authentication for Kubernetes with Keycloak and the Ambassador…

Super Simple Basic Authentication with the Ambassador API Gateway AuthService and Kubernetes. | by Logan Fisher | Sep, 2020 |...

admin 7 months ago in

This article assumes you already have Ambassador API Gateway installed on your Kubernetes cluster and you have existing api endpoints configured on the gateway.- Ambassador Version: 0.85.0 Why? When building out a distributed system with api’s spread across a lot of different micro services, tying them together in some way just makes sense. I like the Ambassador API Gateway because it’s a simple, easy to…

Kubernetes Token Review And Authentication | by Sanad Haj | Sep, 2020 | Medium

admin 8 months ago in

In building web and REST API application, it is very important to build a system users can trust and rely on. Authentication is important because it enables organizations and apps to keep their networks secure by permitting only authenticated users to access its protected resources. In this tutorial, We’ll be discussing how pod authenticate pod running in k8s cluster using Golang and Go-Guardian library along…

Levels of Access Control through Keycloak Part 3a: Integration with Kubernetes | by Usman Shahid | Aug, 2020 | Medium

admin 8 months ago in

This is an extension of part 3of a 4-part series on Keycloak. For part 1, click here, for part 2, click here, and for part 3 click here. There is a bunch of open-source software that provides out of the box integration with OpenID Connect providers such as Keycloak. Additionally, some of them provide the ability to bring in groups/roles from the tokens which are…

What is Mutual Authentication Model and Where is it used? | by Alper Ünal ☁️ 🐳 ☸️ | Jul, 2020...

admin 9 months ago in

In this flood, I will explain what the concept of Mutual Authentication Model is and where it is used. When connecting to a website (for example, a Bank’s online transaction center) with HTTPS, the browser requested the digital certificate from the server at the beginning of communication, checking whether this certificate was signed directly or indirectly by a CA – Certificate Authority that he had…

Attribute Based Access Control with OIDC and NGINX Ingress Controller in Kubernetes | by Marius | Jul, 2020 | Medium

admin 9 months ago in

Protecting resources behind a Kubernetes Ingress, is often a non-trivial task. Especially, as applications tend to have different means of authentication and authorization, or at times do not provide authentication at all. Therefor, creating an awesome user experience, including a single sign on solution across all applications, can quickly become a tedious task. I am writing this article, after seamlessly protecting multiple applications across different…