{"repo":"sighupio/gangplank","free":true,"listed":false,"github":"https://github.com/sighupio/gangplank","clone":"git clone https://github.com/sighupio/gangplank.git","description":"Gangplank is a Kubernetes UI to get a working kubeconfig via oidc","language":"Go","stars":29,"topics":["authentication","kubernetes","oidc-client","fury-distribution"],"license":"Apache-2.0","category":"deployment-docker-iac","readme_excerpt":"Gangplank (noun): A board or ramp used as a removable footway between a ship and a pier. Gangplank is a web application that allows users to authenticate with an OIDC provider and configure their kubectl configuration file with the OpenID Connect Tokens. Gangplank is based on Gangway, which is no longer maintained. Deployment Gangplank can be deployed with Helm or with Kubernetes manifests. The Helm chart can be found here. Instructions for deploying with Kubernetes manifests can be found here. Container images are published to our registry at registry.sighup.io/fury/gangplank . How It Works Kubernetes supports OpenID Connect (OIDC) as a user authentication mechanism. OIDC is an authentication protocol that allows servers to verify the identity of a user by way of an ID Token. When using OIDC to authenticate with Kubernetes, the client (e.g. kubectl ) sends the ID token alongside all requests to the API server. On the server side, the Kubernetes API server verifies the token to ensure it is valid and has not expired. Once verified, the API server extracts username and group membership information from the token, and continues processing the request. In order to obtain the ID token, the user must go through the OIDC authentication process. This is where Gangplank comes in. Gangplank is a web application that enables the OIDC authentication flow which results in the minting of the ID Token. Gangplank is configured as a client of an upstream Identity Service that speaks OIDC. To","default_branch":null,"files":null,"tree":[],"storefront":"/r/sighupio","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/sighupio/gangplank/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}