HN user

chauffer

47 karma
Posts2
Comments5
View on HN
Areweyet 6 years ago

It's amusing how many of the websites are broken due to certificates or outright squatted.

I use https://www.pomerium.io/ for my internal services with Google oauth. I like it because unlike oauth-proxy I can define which users are allowed to which (sub)domains. I run this in Kubernetes and it supports forward authentication, so adding a new service is editing a configmap to let pomerium know about the domain and its allowed users (support for defining this in the ingress is coming), and adding a few ingress annotations.