Another kube-oidc-proxy fork is alive, featuring multi-issuer authentication to managed Kubernetes clusters.

This new project, created by Rafal Pieniazek, implements a reverse proxy that enables authentication from multiple OIDC issuers at once to your managed K8s clusters, such as EKS, GKE, and AKS. To achieve this, the proxy sits in front of the API server, validates the bearer token against required OIDC issuers, and maps the token's claims to a Kubernetes identity. Then, impersonated headers for the mapped user are added, so that existing RBAC stays authoritative.

P.S. This project originates from kube-oidc-proxy by Tremolo Security, which itself is an active fork of the eponymous project by Jetstack.

▶️ GitHub repo

Language: Go | License: Apache 2.0 | 17 ⭐️

#tools #security