mintel / dex-k8s-authenticator

A Kubernetes Dex Client Authenticator
MIT License
371 stars 146 forks source link

Allow specifying OIDC scopes per cluster #129

Closed cmanzi closed 4 years ago

cmanzi commented 4 years ago

We wanted to use this with AWS Cognito, but the default scopes aren't compatible with Cognito User Pool OIDC settings (without a custom resource server).

With configurable scopes, we were able to use Cognito as an OIDC provider in place of Dex.

I know that technically this tool is designed for Dex...but this removes that restriction to a particular idP while preserving existing functionality.

nabadger commented 4 years ago

Looks good, thanks @cmanzi