Cant wrap my head around auth process

This page summarizes the projects mentioned and recommended in the original post on /r/kubernetes

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
  • traefik-forward-auth

    Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy

    Traefik ingress + forward auth middleware + traefik-forward-auth does the trick.

  • portable-oidc

    Portable, pluggable and exportable OIDC stack to protect any application. In docker and Kubernetes flavours.

    If you do not want to change the ingress controller, try this out https://github.com/adyanth/portable-oidc

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  • apisix-dashboard

    Dashboard for Apache APISIX

  • contour-authserver

    An Envoy-compatible authorization server.

    OIDC OAuth for k8s authorization had nothing to do with AAA in your app.Nginx as an ingress or an API gateway is pretty much obsolete - you have to pick an API Gateway with an external Auth support, like Contour and it's auth server.More advanced service meshes, like istio has a built-in authz policies for JWT handling.Keep in mind that with the introduction of API Gateway spec, it's really important to pick the most mature solution out of the bunch. It's especially crucial, after 1.26 release, because current SIG can port the auth policies from service meshes directly into kubernetes admission, like it happened already with OPA & Kyverno policies.

  • istio

    Connect, secure, control, and observe services.

    OIDC OAuth for k8s authorization had nothing to do with AAA in your app.Nginx as an ingress or an API gateway is pretty much obsolete - you have to pick an API Gateway with an external Auth support, like Contour and it's auth server.More advanced service meshes, like istio has a built-in authz policies for JWT handling.Keep in mind that with the introduction of API Gateway spec, it's really important to pick the most mature solution out of the bunch. It's especially crucial, after 1.26 release, because current SIG can port the auth policies from service meshes directly into kubernetes admission, like it happened already with OPA & Kyverno policies.

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts