Support for External Resource Servers with asm-user-auth in GKE

[danieltanase]

Hi, folks!

I'm exploring a setup where asm-user-auth is used with GKE workloads, but the resource server is located outside the GKE cluster. Is there a way to configure asm-user-auth so that it passes both the access token and ID token to the workloads? In that way the workloads could access the details from resource server by passing the access token in the request.

Any details or examples would be greatly appreciated. Thanks in advance!

[aryan16]

We only support asm-user-auth with ingress Gateway in ASM. I don't think there is any way to support asm-user-auth directly on any svc that is not part of the cluster.
I assume here resource server means the service that you own, right?