Skip to content

Add documentation for dashboard OIDC auth#730

Open
dragosdinu wants to merge 1 commit intoprojectsveltos:mainfrom
dragosdinu:dragosdi/oidc-auth
Open

Add documentation for dashboard OIDC auth#730
dragosdinu wants to merge 1 commit intoprojectsveltos:mainfrom
dragosdinu:dragosdi/oidc-auth

Conversation

@dragosdinu
Copy link
Copy Markdown
Member

No description provided.

@gianlucam76 gianlucam76 requested a review from egrosdou01 May 7, 2026 18:58

#### 2. Configure the Kubernetes API Server

The Kubernetes API server must be configured to accept and validate OIDC tokens. The required and optional flags are documented [here](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#openid-connect-tokens).
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you add the example Kubernetes API deployment with k3d? It will be easier for users to understand what they need to configure.

name: https://k8s-oidc-domain.example.com/auth/realms/k8s-oidc#test
```

Note that `subjects.name` includes the OIDC issuer URL prefix followed by the username claim value.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Use the below format instead.

!!!note
    The `subjects.name` includes the OIDC issuer URL prefix followed by the username claim value. In production, avoid granting admin level grants to the dashboard users.

Copy link
Copy Markdown
Contributor

@egrosdou01 egrosdou01 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Minor changes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants