arrikto / oidc-authservice

This is a fork/refactoring of the ajmyyra/ambassador-auth-oidc project
MIT License
87 stars 66 forks source link

External Authentication with Updated OIDC authservice image #107

Open maspranavaninadam opened 1 year ago

maspranavaninadam commented 1 year ago

Use Case:

We have an external microservice that is deployed across namespaces in kubeflow, we want to restrict the access of this microservice to namespace level.

Question:

We observed the oidc-authservice has a external authorizer which has been added two months ago, we couldn't find the updated image where the external authorizer is added. It would be of great help if someone can point to the correct image or a blog that has the external auth tested.

Current setup

kubeflow 1.5 kubernetes 1.21

Old image we were using before external authorizer

New image we used to test the external auth this image gave us 403.

let me know if I missed anything.

Sayed-Imran commented 1 year ago

I think you are a bit confused, oidc-authservice itself is the external authorizer for kubeflow.