Why are there so many OIDC SSO options for Kubernetes?

• kubelogin

  14 1,522 8.8 Go

  kubectl plugin for Kubernetes OpenID Connect authentication (kubectl oidc-login)

kubelogin (helper for k8s build in OIDC support)

• pinniped

  5 506 9.6 Go

  Pinniped is the easy, secure way to log in to your Kubernetes clusters.

  

pinniped

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• infra

  20 1,350 7.4 Go

  Infra provides authentication and access management to servers and Kubernetes clusters.

  

infra

• kube-oidc-proxy

  5 474 1.8 Go

  Reverse proxy to authenticate to managed Kubernetes API servers via OIDC.

  

kube-oidc-proxy (OIDC to Kubernetes API servers where OIDC authentication is not available)

• paralus

  4 930 8.1 Go

  All-in-one Kubernetes access manager. User-level credentials, RBAC, SSO, audit logs.

  

paralus

• dex

  37 9,025 9.4 Go

  OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

  

Note: I know dex is the king in this space as it handles other unknowns.

• authentik

  165 6,762 10.0 Go

  The authentication glue you need.

  

I left DEX out purposely. As I understand DEX, it is a federated OpenID Connect provider, similar to Keycloack, openunison or goauthentik in its core functionality. Dex and the later two have some extra functionality to ease auth to k8s.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project