auth-webhook

Overview ¶

Command auth-webhook provides a reference implementation for the K8s Athenz web hook for authentication and authorization. This is an opinionated implementation that performs user and resource mapping from k8s to Athenz in a specific way. The mapping code is extensively documented for rationale. You can use the program directly if it meets your needs. If not, you can still use the underlying API and supply custom mapping code and the main entry point.

It exposes three endpoints, `/authn` for the authentication handler, `/authz` for the authorization handler, and `/healthz` that always returns a 200 OK response.