jetstack / kube-oidc-proxy

Reverse proxy to authenticate to managed Kubernetes API servers via OIDC.
https://jetstack.io
Apache License 2.0
477 stars 91 forks source link

Can we use jetstack/kube-oidc-proxy without Dex And Gangway #139

Closed venky999 closed 4 years ago

venky999 commented 4 years ago

Can we use jetstack/kube-oidc-proxy without Dex And Gangway to authenticate directly with OIDC providers like Google, Microsoft or Okta

The reason for my question is there is no option to specify client_secret in the OIDC config and more over its not clear how does the kubeconfig look like

The README says we need to provide id-token, refresh-token but not sure how to get these values without something like DEX automatically..

JoshVanL commented 4 years ago

Hi there!

kube-oidc-proxy is agnostic to any OIDC provider. It may be helpful to look at documentation for the specific provider you want against the API server since the configuration there will be identical.

JoshVanL commented 4 years ago

/close

jetstack-bot commented 4 years ago

@JoshVanL: Closing this issue.

In response to [this](https://github.com/jetstack/kube-oidc-proxy/issues/139#issuecomment-668157192): >/close Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.