what is the api-server configuration for this oidc ? what are the claims you have used?
@MirantisUS2 ай бұрын
Hi @bavaskitchen6231, your comment is much appreciated! Api-server Config is as follows: oidc-client-id: "kubernetes" oidc-groups-claim "groups" oidc-issuer-url: "dex.apps.labs-dex.mirantis.mart.red" oidc-username-claim: "email" User Claim = "email" Hope this helps! Please reach out if you have any further questions re: Kubernetes & Dex.
@vavhab2 ай бұрын
With this solution, you have to share the 'client secret' with every Kubernetes user. That is not very secure, though.
@MirantisUSАй бұрын
Hi there @vavhab - According to our internal Dex experts, the client secret shouldn't be getting shared, as it is part of the configuration of Dex itself. When a user authenticates, they are issues a unique token from Dex, which is what should be getting shared. Hope this helps and please reach back out if you have more questions!