Set up weave gitops with OIDC

Question

Set up weave gitops with OIDC

onedr0p opened this issue 7 months ago · comments

Looks like this might now be possible.

Chris Smith · Answer 1 · Sat Dec 09 2023 04:58:03 GMT+0800 (China Standard Time)

I'm going to follow your notes on this (as I've been doing for my entire setup this past week +). Was just trying this last night and found that their OIDC config performs user impersonation against the kube api and I didn't set up my k3s cluster with an OIDC provide (which seems kind of chicken and egg if I run authelia in cluster). Anyways, looking forward to seeing how you tackle this

Devin Buhl · Answer 2 · Sat Dec 09 2023 05:25:25 GMT+0800 (China Standard Time)

That was my experience before. I was hoping that I could use Authelia and impersonate my username defined there as a cluster admin. This still might but be possible but I'll try when I have time.

Devin Buhl · Answer 3 · Fri Dec 29 2023 00:53:02 GMT+0800 (China Standard Time)

@chrisbsmith I was able to get this working. You can check out my wego and authelia config if interested in adding it.