dip
/
tenant-catalog
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Repository for dip
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
4 Commits
17 Branches
0 Tags
3.2 MiB
Tag: Branch: Tree: service-kubeflow
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'service-kubeflow'
${ noResults }
tenant-catalog/kubeflow/common/oauth2-proxy/components/istio-m2m
History
system d1c10ca6d7
Update values 		4 months ago
..
README.md Update values 4 months ago
kustomization.yaml Update values 4 months ago
requestauthentication.yaml Update values 4 months ago

README.md

Kubernetes M2M Authentication with Istio and RequestAuthentication

Overview

This kustomize component enables M2M (Machine-to-Machine) authentication in Kubernetes, using Istio and the RequestAuthentication object. It configures Istio to trust JWTs (JSON Web Tokens) in Authorization Bearer tokens when the JWT issuer matches the one in RequestAuthentication. The default setup uses Kubernetes' self-served OIDC issuer with self-signed certificates.

In Kubernetes clusters managed by platform providers, the OIDC issuer is usually managed by the provider and served behind publicly trusted certificates. In these cases, it's advisable to use the platform-managed Kubernetes OIDC issuer in the RequestAuthentication for seamless integration and authentication compliance with the platform's security standards.