[GUACAMOLE-1012] Support Token Based Authentication for Kubernetes

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Component/s: Kubernetes
• Assignee: Unassigned
• Reporter: Chad Sikorra
• Created: 06/Apr/20 19:45
• Updated: 06/Apr/20 19:48

Description

Currently, the only supported way for authentication to the Kubernetes API is by supplying a client key, as documented here:

https://guacamole.apache.org/doc/gug/configuring-guacamole.html#kubernetes

However, Kubernetes also supports token based authentication in the form of an authorization header:

https://kubernetes.io/docs/reference/access-authn-authz/authentication/#putting-a-bearer-token-in-a-request

It would be useful to have support for this in general as an alternative authentication mechanism. And for some environments, this is the only thing possible for authentication (EKS in AWS).