Portable, Universal Single Sign-On for Your Clusters - Miguel Martinez, Bitnami
In order to enable Single Sign-On in your cluster you need to configure the Kubernetes API server. This is an issue if you are using services where the control plane is managed for you. Some managed services like GKE support SSO out of the box, but are not configurable. Others like AKS allow you to configure it, but only with Active Directory. These options might not fit some of your requirements such as using your company’s existing Identity provider, to use other protocols such as LDAP or SAML or when applications (e.g the Kubernetes Dashboard) need access to the API server. In this session, I will present some workarounds that leverage other native AuthN/AuthZ mechanisms such as service accounts or impersonation via auth proxies. I will also demo how to use these methods to enable SSO for the Kubernetes dashboard that can be used across different managed and on-prem environments.
https://sched.co/MPdT
Join us for KubeCon + CloudNativeCon in San Diego November 18 - 21. Learn more at https://bit.ly/2XTN3ho. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy and all of the other CNCF-hosted projects.
Portable, Universal Single Sign-On for Your Clusters - Miguel Martinez, Bitnami kube context | |
| 13 Likes | 13 Dislikes |
| 694 views views | 32.6K followers |
| Science & Technology | Upload TimePublished on 22 May 2019 |
No comments:
Post a Comment