kube-ssh-proxy

Reverse proxy to access kubernetes services in cluster behind NAT. Using reverse SSH to public cluster.

How it works

Local usage

# Terminal 1
docker-compose build
docker-compose up

# Terminal 2
# Add to authorized keys on server
docker cp kube-ssh-proxy-client:/home/sshuser/.ssh/id_rsa.pub /tmp
docker cp /tmp/id_rsa.pub kube-ssh-proxy-server:/home/sshuser/.ssh/authorized_keys

# Copy dispatcher configuration from git and reload
docker cp ./dispatcher.conf kube-ssh-proxy-client-dispatcher:/etc/nginx/conf.d/default.conf
docker exec -it kube-ssh-proxy-client-dispatcher nginx -s reload

curl http://localhost:8000/svc-1 # Proxies to local-svc-mock-1
curl http://localhost:8000/svc-2 # Proxies to local-svc-mock-2

Release (docker desktop)

docker buildx build --platform linux/amd64,linux/arm64 --push -t jdobes/kube-ssh-proxy:latest -t jdobes/kube-ssh-proxy:0.1 .

Release (podman):

dnf install -y qemu-user-static # needed for buildah cross-arch build
podman login docker.io

podman build -f ./Dockerfile --platform linux/amd64,linux/arm64 --manifest kube-ssh-proxy .
podman manifest inspect kube-ssh-proxy
podman manifest push --all kube-ssh-proxy docker://docker.io/jdobes/kube-ssh-proxy:$(git rev-parse --short HEAD)
podman manifest rm kube-ssh-proxy