How to Secure Your Kubernetes Cluster with OpenID Connect and RBAC

• dex

  37 9,025 9.4 Go

  OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

  

An Okta account. You can sign up for a free Okta account. Or, you can use another OIDC provider or Dex, and the steps should be similar.

• okta-k8s-oidc-terraform-example

  1 3 0.0 HCL

  An example repo showcasing setting up Okta OIDC using Terraform

  

You can find the code for this tutorial on GitHub at https://github.com/oktadev/okta-k8s-oidc-terraform-example.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• kops

  47 15,546 9.9 Go

  Kubernetes Operations (kOps) - Production Grade k8s Installation, Upgrades and Management

  

For kOps, create a cluster with the required config. For example, the code below will create a cluster in AWS.

• kubelogin

  14 1,522 8.8 Go

  kubectl plugin for Kubernetes OpenID Connect authentication (kubectl oidc-login)

Before we can go ahead and test this out, we need to do some setup for kubectl so that it knows how to do OIDC authentication. We need to install kubelogin plugin for this. Go ahead and install it using any of the following commands.

• kdash

  13 1,955 9.0 Rust

  A simple and fast dashboard for Kubernetes

  

When you communicate with a Kubernetes cluster, using kubectl, or a client library, or a tool like KDash, you are primarily interacting with the Kubernetes API server. The API server is responsible for managing the cluster and is responsible for handling requests from a client.

• k3s

  291 26,405 9.6 Go

  Lightweight Kubernetes

  

A Kubernetes cluster. I'm using k3d to run a local k3s cluster. You can use any Kubernetes distribution, including managed PaaS like Amazon EKS, AKS, and GKE, and so on.

• k3d

  76 5,067 7.3 Go

  Little helper to run CNCF's k3s in Docker

  

A Kubernetes cluster. I'm using k3d to run a local k3s cluster. You can use any Kubernetes distribution, including managed PaaS like Amazon EKS, AKS, and GKE, and so on.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project