sso
sso copied to clipboard
buzzfeed
sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for securing internal services
The Quickstart was useful to play around with but I think it might give the wrong idea: SSO is not actually coupled with docker or k8s. It also works great...
In Kubernetes, the most preferred way of authenticating to the dashboard is via an authenticating proxy. https://github.com/kubernetes/dashboard/wiki/Access-control#authentication The authentication mechanism that Kubernetes expects is an `Authorization: Bearer `, where the...
**Describe the bug** I am trying to validate that the user belongs to a given group with Google authentication. I am getting this error in the proxy logs: ```"couldn't fetch...
First off, Great product. We are using it on Kubernetes behind an nginx ingress controller. One of the features nginx supports is hooking in to an auth provider. If there...
**Is your feature request related to a problem? Please describe.** We have several teams working on different projects and we have automated the generation of dynamic routes from which they...
Could you create Docker builds more frequently? The last build is 3 months ago and since then there has been a couple of bugs fixed. I need these bugfixes and...
Currently, it's pretty difficult to cross-reference traffic in the sso-proxy to the upstream service. However, if SSO were to implement the ECS logging schema, this would be relatively straightforward for...
I have configured SSO in kubernetes in front of a service and behind nginx-ingress with proper timeout settings. My service has requests that can be as long as 5 minutes....
`buzzfeed/sso:latest` is getting stale. can we setup something to keep it current or deprecate it? **To Reproduce** searching https://hub.docker.com/r/buzzfeed/sso/builds/ for `latest` brings up a 2 month old build while we...
**Describe the bug** error updating fill cache if a group contains a nested group outside the organization the sso_proxy is part of is added to a default_allowed_groups these errors show...