[Question] Configure Kube API Server with k8 1.32 - Structured Authorization Configuration
- Dominant language
- TypeScript
- Stars
- 2.1k
- Forks
- 395
- Avg merge
- 4d 15h
- Merged PRs (30d)
- 15
Description
**Describe scenario**
We are planning to configure an Authorization Chain in the Kubernetes API server by leveraging the Structured Authorization Configuration introduced in Kubernetes v1.32. This enhancement enables the use of multiple, modular webhook authorizers, which is particularly useful in scenarios where the built-in Kubernetes RBAC model falls short.
This setup allows us to define additional webhook-based authorization mechanisms tailored to our workloads' specific needs.
For more information on this enhancement, refer to:
Kubernetes Blog: Multi-webhook and Modular Authorization [https://kubernetes.io/blog/2024/04/26/multi-webhook-and-modular-authorization-made-much-easier/#:~:text=Call%20to%20action,put%20in%20the%20files%20directory.&text=We%20would%20love%20to%20hear,dev%20channel%20on%20Kubernetes%20Slack.](url)
KEP 3221: Structured Authorization Configuration [https://github.com/kubernetes/enhancements/tree/master/keps/sig-auth/3221-structured-authorization-configuration#proposal](url)
**Question**
1) How can we provide additional configuration to the Kubernetes API server in AKS?
2) How do we apply the new AuthorizationConfiguration resource (Kind: AuthorizationConfiguration) to kube api server in AKS?
Contributor guide
Assessment
This issue has not been assessed yet.