-
Now that we know we can use Apigee's SSO for Kubernetes authentication, we need to get the SSO deployed in a way to allow for it and configure the Kubernetes API Servers to consume it.
-
Stuff for login
-
## Please describe what you would like to see in ContainerSSH
SSH certs can be signed by a 2nd key, acting as a Certificate Authority. While doing so, User based, short lived SSH certificates can be …
sdktr updated
3 months ago
-
The Portal will only be in charge of assigning authorizations (roles) to users. The authentication will be exclusively mangaged by the RT SSO (Outh2 based system).
The following notes specify the i…
-
*Title*: Reject requests with HTTP headers present in claim to headers
*Description*: I would like to optionally block requests that contain HTTP headers which are also present in the claim-to-head…
-
*Title*: *clarification around jw_authn metrics through docs*
*Description*:
Started using envoy's [jwt_authn http filter](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/h…
-
### Problem Statement
I'm implementing ABAC auth check with caveat feature, like "only employees with [env=prod,region=sg] can access servers in Singapore production environment". In [Netflix sampl…
-
**Currently planned for AKS 1.30** Enable OIDC Federation support to enable multi-cloud or alternative identity solutions in AKS.
https://kubernetes.io/docs/reference/access-authn-authz/authentic…
-
*Description*:
Support authorization based on the username of the Basic Auth schema within the `SecurityPolicy`.
Envoy Gateway currently supports authn with Basic Auth, the username can be extra…
-
### Preflight Checklist
- [X] I agree to follow the [Code of Conduct](https://github.com/deckhouse/deckhouse/blob/main/CODE_OF_CONDUCT.md) that this project adheres to.
- [X] I have searched the [iss…