Comments (3)
I just want to make sure I understand. The request is that if k8dash is running with a serviceAccount, that it just use that account for all api requests and not require the user to login? Is that correct?
from skooner.
Not the same usecase, because I don't use a service account. But may still the same problem.
I use a ingress proxy which does the whole oidc authentication and injects the Authorization
header with the Bearer
which can authenticate against the api server. The same works for all other services I have including the kubernetes-dashboard.
But k8dash asks still for the token even it logs Authorization header found. Passing through to client.
If I just enter garbage text in the token field and press enter I can enter k8dash and it shows everything that the authorized user should see.
I can repeat that by deleting the authToken
in the browser local storage.
So it seems for me that as long as there is no authToken
, even a token is provided in the header, it asks anyway for the token.
So in my case, the workaround is to just set the authToken
in local storage to just something random.
Side note: local storage is generally not considered to be a secure place to store tokens.
from skooner.
I ran into this same issue. When I use this method the "Profile" link shows "There was an error and this content was unable to display". I would expect that to be loaded and pulled from the Authorization header being used but it appears to be using the authToken in the browser local storage as previously stated.
from skooner.
Related Issues (20)
- Need to enable https in skooner HOT 4
- Where are the helm charts? HOT 8
- Up and running with oidc via Dex - metrics URLs return 403s HOT 2
- Bug: RAM Request/Limits calculation is incorrect. HOT 1
- Auth Token HOT 7
- OIDC api is failing . Due to internal error
- How to troubleshoot OIDC issues? HOT 2
- Skooner not displaying Deployments HOT 1
- Running skooner with subpath HOT 1
- Does Skooner support OIDC PKCE Auth HOT 3
- Pods: Ready vs Requested should exclude pods in Succeeded state HOT 1
- kubernetes-skooner.yaml does not declare any CPU/RAM request HOT 1
- Can Skooner base path be changed from / ? HOT 2
- Skooner erroring all of a sudden HOT 4
- Add arm64 support HOT 1
- OIDC Login with AzureAD POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews 401 HOT 4
- Open ID Manifests with `authorization_response_iss_parameter_supported=true` 500's on authorization flows with `iss missing from the response` HOT 8
- Issue with Keycloak and Skooner - fail to login within keycloack 401 HOT 1
- Add ability to perform custom branding
- Upgrade from node 16
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from skooner.