infra
/
kubernetes
1
0
Fork 0
Code Pull Requests 4 Activity

authelia: Reduce concent durations 

After considering the implications of Authelia's pre-configured consent
feature, I decided I did not like the fact that a malicious program
could potentially take over my entire Kubernetes cluster without my
knowledge, since `kubectl` may not require any interaction, and could
therefore be executed without my knowledge.  I stopped ticking the
"Remember Consent" checkbox out of paranoia, but that's gotten kind of
annoying.  I figure a good compromise is to only prompt for consent a
couple of times per day.
dch-webhooks-secrets
Dustin 2024-01-04 09:08:07 -06:00
parent ced5a7b4a1
commit ce3bc87f9e
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
authelia/configuration.yml
View File

@ -64,7 +64,7 @@ identity_providers:
- email - email
- offline_access - offline_access
authorization_policy: one_factor authorization_policy: one_factor
pre_configured_consent_duration: 7d pre_configured_consent_duration: 8h
- id: kubernetes - id: kubernetes
description: Kubernetes description: Kubernetes
public: true public: true
@ -72,7 +72,7 @@ identity_providers:
- http://localhost:8000 - http://localhost:8000
- http://localhost:18000 - http://localhost:18000
authorization_policy: one_factor authorization_policy: one_factor
pre_configured_consent_duration: 7d pre_configured_consent_duration: 8h
- id: 1b6adbfc-d9e0-4cab-b780-e410639dc420 - id: 1b6adbfc-d9e0-4cab-b780-e410639dc420
description: MinIO description: MinIO
secret: >- secret: >-
@ -84,10 +84,10 @@ identity_providers:
public: true public: true
redirect_uris: redirect_uris:
- http://127.0.0.1 - http://127.0.0.1
pre_configured_consent_duration: 7d pre_configured_consent_duration: 8h
- id: argocd - id: argocd
description: Argo CD description: Argo CD
pre_configured_consent_duration: 7d pre_configured_consent_duration: 8h
redirect_uris: redirect_uris:
- https://argocd.pyrocufflink.blue/auth/callback - https://argocd.pyrocufflink.blue/auth/callback
secret: >- secret: >-
@ -95,7 +95,7 @@ identity_providers:
- id: argocd-cli - id: argocd-cli
description: argocd CLI description: argocd CLI
public: true public: true
pre_configured_consent_duration: 7d pre_configured_consent_duration: 8h
audience: audience:
- argocd-cli - argocd-cli
redirect_uris: redirect_uris: