dex-k8s-authenticator
dex-k8s-authenticator copied to clipboard
Option to handle dex-core client_secret via k8s secrets + alpine update
Added functionality to overcome a security query where client_secret
is in plain text inside the config.yaml, which is stored in a config map. So now it needs to be stored as a Base64 Encoded String and then the k8s-authenticator will decrypt internally and send the secret then towards the dexidp.
Also, the Alpine version has been increased as well as the documentation is updated for the client_secret
change.
@nabadger, I have changed the concept as of our last conversation in https://github.com/mintel/dex-k8s-authenticator/issues/179 So please review again and let me know if something is unclear. Thanks a lot.
@nabadger any news? Did you check already?
@nabadger Is that repo still under maintainer mode? No answer since month already. So is here any chance to get an update? Otherwise we need to think of a product change as we need some support with the current one. Thanks a lot.
- [ ] @nabadger PR is open since almost 4 month. Any chance to start working my PR?
@nickmintel Can you please have a look? Thanks.
@VF-mbrauer apologies - I've not been able to commit any time for this project recently (I'm not sure these circumstances will change either for a while).
After talking to internal team here, I've decided to raise a ticket to see if we can find other owners/maintainers of this project:
https://github.com/mintel/dex-k8s-authenticator/issues/194
Hi @nabadger, fair point and I absolutely understand. So, no worries. Would be great if we could find other folks who take over as this product is great enrichment for the DEX-Core.