dashboard icon indicating copy to clipboard operation
dashboard copied to clipboard

Support --apiserver-host and --apiserver-skip-tls-verify in Auth module

Open leonjyq opened this issue 1 year ago • 2 comments

What would you like to be added?

For the dashboard auth module, I would like to be able to specify the --apiserver-host and --apiserver-skip-tls-verify like what we can do in API module.

Why is this needed?

Below is the solution we want to implement, we specify the api host to kube-oidc-proxy to leverage its capability for impersonating the request with Azure AD group. API module supports specifying the api host, but Auth module can't. This causes that Auth module will talk to Kubernetes API server directly instead of kube-oidc-proxy, and Kubernetes API server doesn't acknowledge the token signed by Dex. image

leonjyq avatar Aug 13 '24 01:08 leonjyq

Hi, I see there is a new dashboard release 7.7.0 with this code in master branch, but there was no new image build of the auth image. is there anything special that needs to be done for this to happen? This would be very helpful for my use-case :) @maciaszczykm @floreks

Thanks.

josemaia avatar Oct 07 '24 10:10 josemaia

We will do the full release too. It was just a quick release with all helm changes.

floreks avatar Oct 07 '24 14:10 floreks

@leonjyq Can you please share the helm values i am planning to have same approach to achieve.

jagadeesh-kancherla-tfs avatar Nov 15 '24 15:11 jagadeesh-kancherla-tfs