dex-k8s-authenticator icon indicating copy to clipboard operation
dex-k8s-authenticator copied to clipboard

Option to handle dex-core client_secret via k8s secrets + alpine update

Open VF-mbrauer opened this issue 3 years ago • 7 comments

Added functionality to overcome a security query where client_secretis in plain text inside the config.yaml, which is stored in a config map. So now it needs to be stored as a Base64 Encoded String and then the k8s-authenticator will decrypt internally and send the secret then towards the dexidp.

Also, the Alpine version has been increased as well as the documentation is updated for the client_secret change.

VF-mbrauer avatar Nov 10 '21 08:11 VF-mbrauer

@nabadger, I have changed the concept as of our last conversation in https://github.com/mintel/dex-k8s-authenticator/issues/179 So please review again and let me know if something is unclear. Thanks a lot.

VF-mbrauer avatar Jan 12 '22 11:01 VF-mbrauer

@nabadger any news? Did you check already?

VF-mbrauer avatar Jan 25 '22 19:01 VF-mbrauer

@nabadger Is that repo still under maintainer mode? No answer since month already. So is here any chance to get an update? Otherwise we need to think of a product change as we need some support with the current one. Thanks a lot.

VF-mbrauer avatar Feb 16 '22 22:02 VF-mbrauer

  • [ ] @nabadger PR is open since almost 4 month. Any chance to start working my PR?

VF-mbrauer avatar Mar 03 '22 23:03 VF-mbrauer

@nickmintel Can you please have a look? Thanks.

VF-mbrauer avatar Mar 09 '22 00:03 VF-mbrauer

@VF-mbrauer apologies - I've not been able to commit any time for this project recently (I'm not sure these circumstances will change either for a while).

After talking to internal team here, I've decided to raise a ticket to see if we can find other owners/maintainers of this project:

https://github.com/mintel/dex-k8s-authenticator/issues/194

nabadger avatar Mar 09 '22 08:03 nabadger

Hi @nabadger, fair point and I absolutely understand. So, no worries. Would be great if we could find other folks who take over as this product is great enrichment for the DEX-Core.

VF-mbrauer avatar Mar 09 '22 08:03 VF-mbrauer