openunison-k8s-login-oidc
Kubernetes login portal for both kubectl and the dashboard using OpenID Connect. Use groups from your assertion in RBAC policies to control access to your cluster. Supports impersonation and OpenID Connect integration with your API server. (by OpenUnison)
rbacsync
Automatically sync groups into Kubernetes RBAC (by cruise-automation)
Our great sponsors
openunison-k8s-login-oidc | rbacsync | |
---|---|---|
1 | 1 | |
11 | 236 | |
- | -0.8% | |
3.0 | 3.9 | |
about 1 year ago | 4 months ago | |
Less | Go | |
Apache License 2.0 | Apache License 2.0 |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
openunison-k8s-login-oidc
Posts with mentions or reviews of openunison-k8s-login-oidc.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-05-24.
-
Kubernetes Dashboard with Keycloak
Take a look at openunison https://github.com/OpenUnison/openunison-k8s-login-oidc (my company's oss project). Use KC as your identity provider and integrate both dashboard and kubectl.
rbacsync
Posts with mentions or reviews of rbacsync.
We have used some of these posts to build our list of alternatives
and similar projects.
-
Struggling to understand how Google Groups for RBAC is scalable
Prior to google groups being supported in any manner we made rbacsync that does analogous. It's a custom controller that takes IaC declarations for rolebindings, and maps a given google group name to them on a per namespace or cluster basis. In GKE, this worked with a user's auth token from GCP (claims were in the JWT). Id expect it to work with your OIDC integration as well.
What are some alternatives?
When comparing openunison-k8s-login-oidc and rbacsync you can also consider the following projects:
oauth2-proxy - A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
nifikop - The NiFiKop NiFi Kubernetes operator makes it easy to run Apache NiFi on Kubernetes. Apache NiFI is a free, open-source solution that support powerful and scalable directed graphs of data routing, transformation, and system mediation logic.
kubevious - Kubevious - Kubernetes without disasters
argocd-operator - A Kubernetes operator for managing Argo CD clusters.
lens - Lens - The way the world runs Kubernetes
k8s-pod-restart-info-collector - Automated troubleshooting of Kubernetes Pods issues. Collect K8s pod restart reasons, logs, and events automatically.