search

kubeguard / guard

🔑 Kubernetes Authentication & Authorization WebHook Server
https://kubeguard.dev
Apache License 2.0
590 stars 81 forks source link

passwords not in tokens #148

Open kfox1111 opened 6 years ago

kfox1111 commented 6 years ago

It would be good if guard could provide a token mechanism that didn't involve storing usernames/passwords in files. This is unacceptable to some sites security policies.

tamalsaha commented 6 years ago

Any ideas how that can be done?

kfox1111 commented 6 years ago

Some kind of intermediate token registered somewhere and used instead? Maybe stuck in a crd. I think dex does something like that.