-
Notifications
You must be signed in to change notification settings - Fork 234
Open
Description
To support operating in environments that enforce/require client TLS certificates it would be helpful to support mTLS configurability between the proxy and the OIDC issuer.
This would involving adding new command line arguments to specify a TLS certificate and private key. For example, something like:
flagset.StringVar(&o.Auth.Authentication.OIDC.ClientCertFile, "oidc-client-cert-file", "", "If set, the client certificate will be used to authenticate the proxy to the OIDC server. Requires --oidc-client-key-file to be set, too.")
flagset.StringVar(&o.Auth.Authentication.OIDC.ClientKeyFile, "oidc-client-key-file", "", "The key matching the certificate from --oidc-client-cert-file. If set, requires --oidc-client-cert-file to be set, too.")
Metadata
Metadata
Assignees
Labels
No labels