search

headlamp-k8s / headlamp

A Kubernetes web UI that is fully-featured, user-friendly and extensible
https://headlamp.dev
Apache License 2.0
2k stars 147 forks source link

[Desktop]: can't login when using aws sso authentication scheme #358

Open sgandon opened 2 years ago

sgandon commented 2 years ago

Description

We are using aws sso command to authenticate in order to connect to our eks cluster but in headlamp it asks me for a token. I have tried to use the sso token ( found in ~/.aws/sso/cache/xxxxx.json) but without luck.

Impact

unable to connect to cluster.

Environment and steps to reproduce

headlamp 0.53 MacOS Big sur (11.6.1)

joaquimrocha commented 2 years ago

Hi @sgandon . Thank for your reports. We support OIDC, client certificate, and a service account token, for authentication. If you want to use a service account token, please check the documentation here: https://kinvolk.github.io/headlamp/docs/0.4/installation/#authentication--log-in

illume commented 2 years ago

@sgandon I wonder if you ever managed to solve this?

sgandon commented 2 years ago

Hello @illume , I fact I did not try any further.

absmith82 commented 6 months ago

I have tried using a service account token from an EKS cluster and am still not able to authenticate. I keep getting an error authenticating message.

joebowbeer commented 6 months ago

Also see: https://github.com/headlamp-k8s/headlamp/issues/266#issuecomment-881155166

The inability to easily use kubeconfig w/EKS AWS_PROFILE is a showstopper for us (unlike kubectl, k9s, Octant, Lens, OpenLens, Aptakube, etc.)

zen commented 3 months ago

This is a major drawback. I manage tens of clusters on AWS and not being able to use SSO is a showstopper. Any plans to implement that pretty standard feature?