How Structured Authentication Config changes Kubernetes auth, with Maksim Nabokikh
Description
Structured Authentication Config is the most significant Kubernetes authentication system update in the last six years.
In this KubeFM episode, Maksim explains how this is going to affect you:
You can use multiple authentication providers simultaneously (e.g., Okta, Keycloak, GitLab) — no need for Dex.
You can change the configuration dynamically without restarting the API server.
You can use any JWT-compliant token for authentication.
You can use CEL (Common Expression Language) to determine whether the token's claims match the user's attributes in Kubernetes (username, group).
Sponsor
This episode is sponsored by Learnk8s — become an expert in Kubernetes
More info
Find all the links and info for this episode here: https://kube.fm/structured-authentication-maksim
Interested in sponsoring an episode? Learn more.
Xe Iaso shares their journey in building a "compute as a faucet" home lab where infrastructure becomes invisible and tasks can be executed without manual intervention. The discussion covers everything from operating system selection to storage architecture and secure access patterns.
You will...
Published 11/19/24
If you're trying to make sense of when to use Kubernetes and when to avoid it, this episode offers a practical perspective based on real-world experience running production workloads.
Paul Butler, founder of Jamsocket, discusses how to identify necessary vs unnecessary complexity in Kubernetes...
Published 11/12/24