Skip to content

Support Personal Access Tokens in Kubernetes API proxy

Timo Furrer requested to merge k8s-proxy-pat-auth into master
  • Support Personal Access Tokens in Kubernetes API proxy

A user can by authorized for the Kubernetes API proxy by providing a valid Personal Access Token (PAT) via Authorization header like this:

Authorization: Bearer pat:<agent-id>:<pat>

One can use a kube config like this:

---
apiVersion: v1
kind: Config
clusters:
- name: gitlab
  cluster:
    server: https://kas.gdk.test:3443/-/k8s-proxy
users:
- name: agent
  user:
    token: pat:<agent-id>:<pat>
current-context: test-pat-auth
contexts:
- name: test-pat-auth
  context:
    cluster: gitlab
    user: agent

Closes #439 (closed)

Edited by Timo Furrer

Merge request reports