Serhii Ponomarenko a8dd332ff8 SAML integration prototype (#1475)
* 🔨 Add `AUTH_TYPE` field to `ConfigMap`

* 🔨 Add `AUTH_SAML_IDP_METADATA_URL` field to `ConfigMap`

* 🔨 Add `AUTH_SAML_X509_CRT` field to `Secret`

* 🔨 Add `AUTH_SAML_X509_KEY` field to `Secret`

* 🔨  Mount SAML X.509 key pair into `hub`

* 🔨 Add `REACT_APP_AUTH_TYPE` environment variable to `front`

* 🔧 Add Nginx path rewrite for `/saml`

* 🔧 Raise request size to accept big SAML responses

* 🔨 Add `REACT_APP_AUTH_TYPE` environment default value

* 📝 Update `README.md`

* 📝 Update `README.md`

* 🔨 Add `AUTH_TYPE` config map key

* 🔨 Add `AUTH_SAML_IDP_METADATA_URL` config map key

* ☸ Set `CONFIG_AUTH_TYPE` from `TapConfig`

* ☸ Set `CONFIG_AUTH_SAML_IDP_METADATA_URL` from `TapConfig`

*  Create `SamlConfig` in `TapConfig.AuthConfig`

* 🔨 Use updated `tap.auth.saml.idpMetadataUrl` tap config field

* 📝 Update `README.md`

* 🔨 Add `tap.insgress.enabled/host` to `ConfigMap`

* 🔨 Add `tap.proxy.front.port` to `ConfigMap`

* 🔨 Add `REACT_APP_AUTH_SAML_IDP_METADATA_URL` env to `front`

* 🔧 Supply `auth.saml` fields to `helm-chart/values.yaml`

* 🐛 Fix indentation for X.509 secrets

* 📝 Provide SAML setup docs

* 📝 Update SAML setup docs

* 📝 Update SAML setup docs

* Added callback URL indication

* 💥 Disable standard `Descope` auth

---------

Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-01-23 10:47:29 -08:00
2023-10-16 23:25:02 +03:00
2024-01-23 10:47:29 -08:00
2024-01-23 10:47:29 -08:00
2023-11-03 01:09:22 +03:00
2024-01-23 20:54:58 +03:00
2023-03-17 20:09:09 +03:00
2023-12-28 22:09:01 +03:00
2023-12-28 22:09:01 +03:00
2022-12-30 08:30:48 +03:00
2022-11-30 04:50:12 +03:00
2023-11-21 20:24:57 +03:00
2023-12-20 12:59:48 +02:00

Kubeshark: Traffic analyzer for Kubernetes.

GitHub Latest Release Docker pulls Image size Discord Slack

NEW: Version 52.0.0 now available, featuring a new Traffic Recorder and Half & Erroneous Connection Analysis.

Kubeshark is an API Traffic Analyzer for Kubernetes providing real-time, protocol-level visibility into Kubernetes internal network, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters.

Simple UI

Think TCPDump and Wireshark re-invented for Kubernetes

Getting Started

Download Kubeshark's binary distribution latest release and run following one of these examples:

kubeshark tap
kubeshark tap -n sock-shop "(catalo*|front-end*)"

Running any of the ☝️ above commands will open the Web UI in your browser which streams the traffic in your Kubernetes cluster in real-time.

Homebrew

Homebrew 🍺 users can add Kubeshark formulae with:

brew tap kubeshark/kubeshark

and install Kubeshark CLI with:

brew install kubeshark

Building From Source

Clone this repository and run make command to build it. After the build is complete, the executable can be found at ./bin/kubeshark__.

Documentation

To learn more, read the documentation.

Contributing

We ❤️ pull requests! See CONTRIBUTING.md for the contribution guide.

Code of Conduct

This project is for everyone. We ask that our users and contributors take a few minutes to review our Code of Conduct.

Description
The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters.. Think TCPDump and Wireshark re-invented for Kubernetes
Readme 166 MiB
Languages
Go 92.4%
Makefile 5.3%
Shell 1.3%
Smarty 1%