https://deploy-preview-82--docs-projectcapsule.netlify.app/docs/proxy/Recent content in Proxy on CapsuleHugo -- gohugo.ioenhttps://deploy-preview-82--docs-projectcapsule.netlify.app/docs/proxy/proxysettings/Tue, 20 Feb 2024 00:00:00 +0000https://deploy-preview-82--docs-projectcapsule.netlify.app/docs/proxy/proxysettings/The configuration for the Proxy is also declarative via CRDs. This allows both Administrators and Tenant Owners to create flexible rules. GlobalProxysettings As an administrator, you might have the requirement to allow users to query cluster-scoped resources which are not directly linked to a tenant or anything like that. In that case you grant cluster-scoped LIST privileges to any subject, no matter what their tenant association is. For example: apiVersion: capsule.https://deploy-preview-82--docs-projectcapsule.netlify.app/docs/proxy/gangplank/Mon, 01 Jan 0001 00:00:00 +0000https://deploy-preview-82--docs-projectcapsule.netlify.app/docs/proxy/gangplank/Gangplank is a web application that allows users to authenticate with an OIDC provider and configure their kubectl configuration file with the OpenID Connect Tokens. Gangplank is based on Gangway, which is no longer maintained. Prerequisites For Authentication you will need a Confidential OIDC client configured in your OIDC provider, such as Keycloak, Dex, or Google Cloud Identity. By default the Kubernetes API only validates tokens against a Public OIDC client, so you will need to configure your OIDC provider to allow the Gangplank client to issue tokens.https://deploy-preview-82--docs-projectcapsule.netlify.app/docs/proxy/reference/Mon, 01 Jan 0001 00:00:00 +0000https://deploy-preview-82--docs-projectcapsule.netlify.app/docs/proxy/reference/Packages: capsule.clastix.io/v1beta1 capsule.clastix.io/v1beta1 Resource Types: GlobalProxySettings ProxySetting GlobalProxySettings GlobalProxySettings is the Schema for the globalproxysettings API. Name Type Description Required apiVersion string capsule.clastix.io/v1beta1 true kind string GlobalProxySettings true metadata object Refer to the Kubernetes API documentation for the fields of the metadata field. true spec object GlobalProxySettingsSpec defines the desired state of GlobalProxySettings. false GlobalProxySettings.spec GlobalProxySettingsSpec defines the desired state of GlobalProxySettings. Name Type Description Required rules []object Subjects that should receive additional permissions.