{"repo":"slok/simple-ingress-external-auth","free":true,"listed":false,"github":"https://github.com/slok/simple-ingress-external-auth","clone":"git clone https://github.com/slok/simple-ingress-external-auth.git","description":"A very simple external authentication service for Kubernetes ingresses (ingress-nginx, traefik...)","language":"Go","stars":22,"topics":["ingress","auth","authentication","external-auth","external-authentication","ingress-nginx","k8s","kubernetes","nginx","traefik"],"license":"Apache-2.0","category":"auth-billing-email","readme_excerpt":"simple-ingress-external-auth Easy and simple Kubernetes ingress authentication. How does it work Most kubernetes ingress have a way of delegating the authentication to an external auth system. To make this possible normally the ingress controller will forward the request to the external auth system (this auth app), and the auth app will return a 200 if its authenticated, and different than 200 if its not. When it starts, this application will load a configuration file where it has all the tokens defined (and some other optional properties). When the ingress-controller forwards the request, this app will check for Authorization: Bearer header and validate against the tokens it has defined. Proxy examples that can be used: Nginx ingress-nginx external authentication: Nginx is the default configuration used by simple-ingress-external-auth: - --request-method-header=X-Original-Method - --request-url-header=X-Original-URL Traefik traefik forward authentication options that can be used on simple-ingress-external-auth: - --request-method-header=X-Forwarded-Method - --request-url-header=X-Forwarded-Uri Features - Simple and easy to deploy (no complex setup, no databases...). - Ability to rotate tokens (create a new token and add expiration date to the old one). - Authenticate Kubernetes ingress easily. - Fast and scalable (everything is in memory). - Advanced token validation properties (expire date, disable...). - Can be used with GRPC (e.g ingress-nginx grpc) - Different configurat","default_branch":null,"files":null,"tree":[],"storefront":"/r/slok","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/slok/simple-ingress-external-auth/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}