Authentication Flow

Authentication Flow An architecture diagram generated by Archify. User / Service · kubectl, Pods, etc. · Architecture component User / Service kubectl, Pods, etc. API Server · kube-apiserver · Architecture component API Server kube-apiserver X.509 Certificates · TLS client certificates · Authentication Methods X.509 Certificates TLS client certificates Service Account Tokens · JWT · Authentication Methods Service Account Tokens JWT OpenID Connect · External identity provider · Authentication Methods OpenID Connect External identity provider Webhook Token Authentication · External authentication service · Authentication Methods Webhook Token Authentication External authentication service Authentication Proxy · User info passed via HTTP headers · Authentication Methods Authentication Proxy User info passed via HTTP headers Authentication result · Success / Failure · Architecture component Authentication result Success / Failure Move to Authorization Stage · Authorization · Architecture component Move to Authorization Stage Authorization Request Denied · On authentication failure · Architecture component Request Denied On authentication failure Authentication request Authentication success Authentication failure Authentication Methods Legend Backend Security External

Authentication Methods

  • • X.509 Certificates: authentication using TLS client certificates
  • • Service Account Tokens: service account authentication using JWT tokens
  • • OpenID Connect (OIDC): authentication through external identity providers
  • • Webhook Token Authentication: authentication through external authentication services
  • • Authentication Proxy: authentication through a proxy