Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhance guard as Authorization Webhook server #237

Open
krdhruva opened this issue Dec 24, 2019 · 4 comments
Open

Enhance guard as Authorization Webhook server #237

krdhruva opened this issue Dec 24, 2019 · 4 comments

Comments

@krdhruva
Copy link
Contributor

Currently guard is being used in AKS as authentication server for AAD users. In this scenario guard requires to have certain kind of read permission to fetch user information from AAD.
By adding some more read permissions, Guard can be enhanced as Authorization server such that it can verify AAD user access on Kubernetes resources. This will ensure that user doesn't need any additional solution for Authorization.

This issue is a feature request to add Authorization webhook server support in Guard for Azure.

@tamalsaha
Copy link
Contributor

@krdhruva, are you part of the Azure team? Either way, we would love to have your contribution on this feature.

cc: @amanohar , as contributed previously to Azure feature.

@krdhruva
Copy link
Contributor Author

@tamalsaha, yes I'm part of Azure team.

@tamalsaha
Copy link
Contributor

#236 pr coming from your team?

@krdhruva
Copy link
Contributor Author

Yes. @weinong is part of Azure team.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants