kubeguard / guard

🔑 Kubernetes Authentication & Authorization WebHook Server
https://kubeguard.dev
Apache License 2.0
590 stars 81 forks source link

Support for ARC obo service for getMemberGroups #364

Closed Anumita closed 1 year ago

Anumita commented 1 year ago

Currently user has to create 3P apps to configure guard to able to get groups of the logged in user and do checkaccess as well.

With the support of the obo service in ARC, user will not need to create these 3P apps. This PR contains changes to call the obo service when the authnMode is set to "arc". Token provider used : MSI token provider In authorization if client id and client secret are not set we will use msi token to send checkaccess call