Auth on k8s

Libs

• k8s-auth-client - auth client for k8s

Articles

• mTLS - Securing Microservice Architecture with Mutual TLS Authentication
• Transparently Securing Kafka, Istio-style, with up to 300% Higher Performance than Native TLS in Microservice Environments
• Comparing Kubernetes Authentication Methods
• Protect Kubernetes Dashboard with OpenID Connect
• Step by step guide to integrate LDAP with Kubernetes
• ASP.Net Core & Angular OpenID Connect using Keycloak

Issues

1. The first time, when we deployed on AKS we might get an exception about the permission with tiller

> kubectl create serviceaccount tiller --namespace kube-system  
> kubectl create clusterrolebinding tiller-cluster-rule --clusterrole=cluster-admin --serviceaccount=kube-system:tiller  
> helm init --upgrade --service-account tiller  
> helm repo update  
> helm install stable/nginx-ingress --namespace kube-system

Reference at https://stackoverflow.com/questions/50309012/deploy-nginx-ingress-in-aks-without-rbac-issue