Webhook service for Kubernetes LDAP authentication

This is a webhook service that implements LDAP authentication for Kubernetes with the Webhook Token authentication plugin.

Dependencies

go get github.com/go-ldap/ldap
go get k8s.io/api/authentication/v1

Compile

Cross-compile for Linux:

GOOS=linux GOARCH=amd64 go build main.go

Run

main <ldap-ip> <key> <cert>

Arguments:

• <ldap-ip>: IP address of the LDAP directory
• <key>: HTTPS server private key
• <cert>: HTTPS server certificate

You can generate an HTTPS private key and a self-signed certificate with the following command:

openssl req -x509 -newkey rsa:2048 -nodes -subj "/CN=localhost" -keyout key.pem -out cert.pem