News for hackers. Stuff that matters.

A comment on Step-by-Step Centralized Authentication for K8s with Keycloak and Ambassador.

Re:Step-by-Step Centralized Authentication for K8s with Keyc... by bobberkarl on Friday August 28, 2020 @04:24PM (#24309527)
How is keycloak compared to Pomerium for example?
[ Parent | on HN ]
Re:Step-by-Step Centralized Authentication for K8s with Keyc... by ForHackernews on Friday August 28, 2020 @04:54PM (#24309810)
Keycloak is an identity provider. It's an Oauth2/OpenIDConnect authorization server. Pomerium looks to be some kind of proxy to enforce authorization (in OAuth2 jargon, it would be a resource server).

Succinctly: Keycloak issues security tokens, Pomerium (I think) accepts security tokens.

[ Parent | on HN ]