Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add design proposal for sso without oidc api server. #2145

Merged
merged 1 commit into from
Nov 5, 2020

Conversation

absoludity
Copy link
Contributor

Description of the change

Adds the overview and link to the design proposal for supporting SSO without requiring k8s API server configuration.

Copy link
Contributor

@andresmgot andresmgot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Regarding the two options listed in the document (using certs or id_tokens), I believe you are working in a POC for the former, right?

@absoludity
Copy link
Contributor Author

Regarding the two options listed in the document (using certs or id_tokens), I believe you are working in a POC for the former, right?

Yep, as that's what I can already test against with pinniped (and it also doesn't require oauth setup on workload clusters either).

@absoludity absoludity merged commit d0f03f0 into vmware-tanzu:master Nov 5, 2020
@absoludity absoludity deleted the add-pinniped-proposal branch November 5, 2020 19:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants