KubeCon + CloudNativeCon Europe 2019

We present a thorough walkthrough of the Kubernetes authentication and authorization codebase, where we will cover interface contracts and give specific examples of how they are implemented in Kubernetes.  The audience will also be given a high level overview of the request processing pipeline.  The generic nature of these interfaces will be explored along with a look into areas where Kubernetes has a strong opinion on the implementation specifics such as service accounts and the node authorizer.  As a case study, the OpenShift auth stack will be discussed.  OpenShift’s use of OAuth for authentication and role based access control for authorization will lead into discussions around token delegation, auditing, access controlled resource lists, etc.