Selecting the Right Identity Provider for Kubernetes: A Comparative Survey
Talkat KubeCon + CloudNativeCon North America 2020 Virtual · on Thursday, 2020-11-19· at 15:45· Intrado Virtual Event Platform,·
summary
Compares Dex, UAA, Keycloak, OpenUnison and Gluu against concrete markers: protocol support, deployment, client libraries, federation, certification and scale. LDAP is described as legacy and hard to scale; Dex/UAA fit cluster admin use but not application auth. Keycloak offers a friendly UI and CLI but needs extra configuration and some enterprise add‑ons. Gluu claims 100% open source with enterprise support, Gluu Server 4.x OpenID‑certified and FAPI certified, supports Couchbase scale‑out and Helm charts to handle thousands of logins/sec in production.
AI-written summary · about
chapters (11)
- 0:00Start
- 1:22Identity Evolution
- 4:11SAML vs OAuth vs OIDC
- 9:05Typical IdP Architecture (for K8s) dex
- 10:17Do we still need LDAP in 2020?
- 12:16Portals to another IdP
- 13:33The Outstanding in the Crowd with open source street cred
- 15:06Common Markers of Interest
- 16:53Let's Compare
- 27:48But I can just use dex, or UAA
- 28:55Conclusion
related talks
01h 07mK8s and Active Directory Can Be Friends! How to Use Dex to Bridge the Gap
01h 03mSingle Sign On with Keycloak: why and how
31mCloud Foundry UAA as an Identity Proxy Product Roadmap
41mKubernetes Auth and Access Control
41mArchitecting Kubernetes-Based Internal Developer Platforms: Essential Patterns...
28mIdentity: From Legacy to Microservices
01h 59mBuilding Secure Kubernetes Clusters with Identity Management
09mNavigating the Identity Abyss in the AI‑Native Era