How to better authentify

This commit is contained in:
pb 2025-02-10 18:45:54 +01:00
parent 55794832ad
commit 91c272d58f

View File

@ -54,3 +54,7 @@ At the moment the only time we have faced this issue is with the MinIO s3 storag
## Possible improvements
- Pods bound token, can they be issued to the remote cluster via an http API call ? [doc](https://kubernetes.io/docs/reference/kubernetes-api/authentication-resources/token-request-v1/)
- Using a service that contact its counterpart in the target cluster, to ask for a token with a validity set by the user in the workflow workspace. Communication over HTTPS, but how do we generate secure certificates on both ends ?