search

headlamp-k8s / headlamp

A Kubernetes web UI that is fully-featured, user-friendly and extensible
https://headlamp.dev
Apache License 2.0
2.03k stars 149 forks source link

Bypass Token / OIDC authentication #1801

Open SquupS opened 5 months ago

SquupS commented 5 months ago

Is it possible to bypass the built in auth methods in case there are other Auth mechanisms in place that you never the lass have to pass until you reach the headlamp frontend?

joaquimrocha commented 5 months ago

Using the token via an SA or OIDC is recommended. However, I guess you can set a client certificate in the kubeconfig if you want to bypass it (but this way of course it is not recommendable to expose your headlamp deployment to strangers).

SquupS commented 5 months ago

@joaquimrocha Ok. Thanks for the input. Will try. Will not be exposed to strangers since the ingresses will get removed and only the internal cluster service endpoint of headlamp will get used by another frontend wrapping around.

illume commented 2 months ago

Can this issue be closed?