10:19 a.m.
I believe there will be two distinct integration points of Keycloak
with Kubernetes.
* Kubernetes relies on Keycloak for authentication and even authorization
* Keycloak is offered as a Kubernetes services for appliations and users to use
These should be 2 distinct use cases.
--
Bill Burke
Red Hat
1:43 p.m.
The first one is wider though. Kubernetes using Keycloak as OAuth2 provider
or delegating to external Keycloak instance like in case of OpenShift right
now.
On Tue, Oct 10, 2017 at 5:46 PM Bill Burke <bburke(a)redhat.com> wrote:
I believe there will be two distinct integration points of Keycloak
with Kubernetes.
* Kubernetes relies on Keycloak for authentication and even authorization
* Keycloak is offered as a Kubernetes services for appliations and users
to use
These should be 2 distinct use cases.
--
Bill Burke
Red Hat
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
2:38 p.m.
Doesn't make more sense a subject like "Keycloak and Kubernetes/Istio" or
just "Keycloak and Istio". Although makes a lot sense Keycloak and
Kubernetes integration, Istio is more related with the application layer
and where we can push all capabilities provided by Keycloak.
One thing that would be awesome to see is specific metrics from Prometheus
related with security. Or even define adapter config outside deployments
(move keycloak.json out of deployments) just like you do with other
components in kube/istio.
On Tue, Oct 10, 2017 at 11:19 AM, Bill Burke <bburke(a)redhat.com> wrote:
I believe there will be two distinct integration points of Keycloak
with Kubernetes.
* Kubernetes relies on Keycloak for authentication and even authorization
* Keycloak is offered as a Kubernetes services for appliations and users
to use
These should be 2 distinct use cases.
--
Bill Burke
Red Hat
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
2382
days inactive
2388
days old
2 comments
3 participants
participants (3)
-
Bill Burke -
Boleslaw Dawidowicz -
Pedro Igor Silva