Cluster Authentication

There are three ways to authenticate against a MetaKube cluster:

Authentication with central admin token

For every cluster we automatically generate a central admin token that gives you full admin access to the cluster. This token is the same for every logged in user.

For more information see Download a kubeconfig with a central admin token.

Authentication with ServiceAccount tokens

You can authenticate against a cluster with a ServiceAccount token. This is especially useful for technical accounts like your CI system.

For more information see Role Based Access Control with ServiceAccounts.

Authentication with OpenID Connect vi our Login (beta)

Optionally you can authenticate against a cluster with our Login OpenID Provider which is powered by Keycloak. There you are provided with your own realm in which you can either manage your users and groups manually, or that you can connect to an external User Management System like LDAP, Active Directory or any SAML or OpenID Connect Provider.

For more information see Authenticating with our login and external authentication system.