Skip to main content
Version: latest

Dex

Dex is an identity service to drive authentication for Kubernetes API Server through the OpenID Connect plugin. Clients such as kubectl can act on behalf of users who can log in to the cluster through any identity provider that dex supports.

Versions Supported​

  • 2.35.1

Components​

Dex integration in Spectro Cloud will deploy the following components:

  • Dex.
  • Dex Client (dex-k8s-authenticator).

The integration will create self-signed certificates, will cross-configure Dex, Dex Client components & will set appropriate flags on the Kubernetes API Server.

Ingress​

Follow below steps to configure Ingress on Dex

  1. Change Dex serviceType from "LoadBalancer" to "ClusterIP" (line #112)
  2. Ingress (line #118)
    • Enable Ingress; Change enabled from false to "true"
    • Set Ingress rules like annotations, path, hosts, etc.

Follow below steps to configure Ingress on Dex Client

  1. Change dex-k8s-authenticator serviceType from "LoadBalancer" to "ClusterIP" (line #312)
  2. Ingress (line #320)
    • Enable Ingress; Change enabled from false to "true"
    • Set Ingress rules like annotations, path, hosts, etc.

With these config changes, you can access Dex, Dex Client service(s) on the Ingress Controller LoadBalancer hostname / IP

References​