headlamp icon indicating copy to clipboard operation
headlamp copied to clipboard

Request in-cluster support for multiple cluster for server side dashboard.

Open jgyy opened this issue 1 year ago • 3 comments

Would like to have multi cluster option for headlamp that is hosted within cluster. Currently I am able to configure keycloak oidc to login into my eks cluster.

However there is no such options to have both multi-cluster and oidc auth in the dashboard without having to resort to using client based headlamp which is not what i wanted. Kindly enlighten me if I am wrong about it. Thank You!

jgyy avatar Apr 10 '23 12:04 jgyy

@jgyy , I think you are right that we only have single cluster options for OIDC when we are running with the in-cluster option. If you are able to use several OIDC config in the desktop (I am not sure this works), then maybe you can try creating that kubeconfig and running in-cluster but also providing the -kubeconfig option pointing to that file.

joaquimrocha avatar Apr 19 '23 08:04 joaquimrocha

Thanks for your comment, from what I read in the given documentations, OIDC login is not supported in desktop client. Configuring oidc token in kubeconfig is not a viable option as the token from keycloak have an expiry date unlike service account token which is permanent unless changed.

I am building up this application for multiple group of users with different permissions, hence editing kubeconfig and hosting it on the server is not a proper way for me to host the dashboard.

jgyy avatar Apr 20 '23 02:04 jgyy

I also second the request to be able to handle multiple clusters from the in-cluster version of headlamp. It would be a convenient alternative to running the desktop version.

waldner avatar Jan 12 '24 13:01 waldner