Skip to content

Add support for optin service account auth for incluster deployments. #3607

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

yolossn
Copy link
Contributor

@yolossn yolossn commented Jul 9, 2025

The backend now supports two flags that can be used to make the incluster deployment authenticated by default, this allows the users to use OIDC proxies in front of headlamp without having to deal with service account token. For more details refer the issue

Fixes: #3606

yolossn added 2 commits July 9, 2025 17:35
…or incluster

This patch adds optin option for users to make the incluster
authenticated by default, this can be used when users want to
use OIDC proxies infront of headlamp to avoid 2 step auth,
OIDC + service account token

Signed-off-by: yolossn <[email protected]>
Add helm chart configuration options to support the new service account
token authentication feature added to the backend

Signed-off-by: yolossn <[email protected]>
@k8s-ci-robot k8s-ci-robot requested a review from skoeva July 9, 2025 12:09
@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Jul 9, 2025
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: yolossn
Once this PR has been reviewed and has the lgtm label, please assign sniok for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot requested a review from vyncent-t July 9, 2025 12:09
@k8s-ci-robot k8s-ci-robot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Jul 9, 2025
@yolossn yolossn marked this pull request as draft July 9, 2025 13:22
@k8s-ci-robot k8s-ci-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jul 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

backend: Add default service account token authentication option for in-cluster deployments
2 participants