Authorization and Authentication for Kubernetes Apps

A common non-functional requirement that gets built into apps and services is authentication and authorization. On a small scale, this practice adds a manageable amount of complexity that’s acceptable when the app doesn’t require frequent updates. But with faster release velocities at larger scale, integrating authentication and authorization into your apps becomes untenable.

In this video, Technical Marketing Engineer Amir Rawdat shares how you can offload this functionality to an Ingress controller to achieve better security and more efficient use of resources.

Read the blog: "Implementing OpenID Connect Authentication for Kubernetes with Okta and NGINX Ingress Controller"

NGINX Ingress Controller Docs for Implementing OIDC

Get Started with NGINX Ingress Controller

Free eBook: Taking Kubernetes from Test to Production

Chapters:
0:00 - Authentication and Authorization with Kubernetes Apps Overview
0:40 - What is Authentication and Authorization?
2:05 - Importance of Auth/Auth at the Ingress Layer
7:55 - Leveraging the Kubernetes API for Auth/Auth
11:25 - Testing the Authentication Workflow
12:15 - Creating Multiple App Integrations for SSO
13:59 - Understanding Scopes and Claims for Authorization with OIDC
16:04 - Summary of Authentication and Authorization Models

[hajriyahia]

Hello, I think that IdTokens should never be used for authorization flow

[theopsengineer]

what is clientID in oidc poliy yaml file? also what is host in app-ingress.yaml? Is it the ingress controller host name?

[firaszein]

Does windows authentication possible here?

[infosandfacts]

Why always kubernetes??? What about all the other nginx issues. Why not basics? Rewrite rules as a series???