Comments (3)
Hi @kfox1111
I'm not really get your point. Could you explain it in a little more detail?
from keycloak-controller.
so, for example, see https://github.com/kubernetes/ingress-nginx/tree/master/docs/examples/auth/oauth-external-auth (and maybe https://github.com/kubernetes/ingress-nginx/blob/master/docs/examples/auth/oauth-external-auth/oauth2-proxy.yaml)
This plugs in oauth2_proxy into nginx-ingress as a pure auth plugin.
I'm thinking keycloak-client-controller has enough information to launch the authentication bits for the user to go along with the client bits that it is retrieving?
So, maybe the user puts in a few config options in the CustomResource and it automatically provisions the auth plugin for them?
That would allow the user to focus on developing their website, and through a k8s object can get the whole security layer added for them.
from keycloak-controller.
Got it, and I support this idea.
But as this actually not fit to our scenario (we're using traefik and keycloak-gatekeeper), we'll not implement this soon.
I'll let this issue open and maybe someone else will implement this and create a PR.
Thanks for the idea!
from keycloak-controller.
Related Issues (18)
- Question: Why is custom resources Keycloak not namespaced? HOT 2
- Suggestion: allow KeycloakClient to specify Redirect URIs HOT 1
- Creating KeycloakClient while Keycloak server is down HOT 1
- Keycloak server compatibility versions ? HOT 3
- API HOT 2
- Keycloak 10.0+ HOT 3
- Role not assigned in Keycloak although exists in kcc GCP store HOT 1
- Keycloak 11.0 HOT 1
- make sure that client scope is created before client
- Manage keycloak instances deployed via helm? HOT 2
- Unrecognized field "clientSessionIdleTimeout" while creating Clients HOT 2
- KubernetesClientException: Failure executing: POST /api/v1/namespaces/**/secrets
- Arrays sorting is non-deterministic and results in lots of changes in DB
- Way to run tests locally HOT 1
- Open for Adoption
- Document the process to start the controller HOT 3
- Error message "RESTEASY004655: Unable to invoke request"
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from keycloak-controller.