xTag

镜像概览

完整引用
docker.io/kubeflowmanifestswg/oidc-authservice
Registry
docker.io
命名空间
kubeflowmanifestswg
仓库
oidc-authservice
已缓存 Tag 数
2
最近同步
07/06/2026, 03:19 AM

简介

Kubeflow OIDC AuthService 镜像，Istio ext_authz 外部认证，对接 Dex/OAuth Provider 保护 Kubeflow Dashboard 访问。

详细介绍

kubeflowmanifestswg/oidc-authservice 运行 OIDC 认证代理服务，作为 Istio ext_authz 过滤器验证用户 OIDC token 并设置 session cookie。定位为 SSO 认证 API 服务，Kubeflow 安装栈中保护 Dashboard/Ingress；K8s Deployment 与 Dex 同 namespace。

快速启动

docker run -d --name oidc-authservice \
  -p 8080:8080 \
  -e OIDC_PROVIDER=https://dex.example.com \
  docker.io/kubeflowmanifestswg/oidc-authservice:latest

推荐实践

kubectl apply -k github.com/kubeflow/manifests/example
# istio-system namespace 中 oidc-authservice Deployment

核心参数说明

  • 安装 — Kubeflow manifests
  • -e OIDC_PROVIDER — Dex/OAuth Issuer URL
  • 组件 — Istio ext_authz 认证
  • 依赖 — Dex + Istio Gateway

Kubernetes

apiVersion: apps/v1
kind: Deployment
metadata:
  name: oidc-authservice
  namespace: istio-system
spec:
  replicas: 2
  selector:
    matchLabels:
      app: oidc-authservice
  template:
    metadata:
      labels:
        app: oidc-authservice
    spec:
      containers:
        - name: authservice
          image: docker.io/kubeflowmanifestswg/oidc-authservice:v0.2.0
          ports:
            - containerPort: 8080
          envFrom:
            - secretRef:
                name: oidc-authservice-env
---
apiVersion: v1
kind: Service
metadata:
  name: authservice
  namespace: istio-system
spec:
  selector:
    app: oidc-authservice
  ports:
    - port: 8080
      targetPort: 8080

Istio AuthorizationPolicy 引用 ext_authz；Dex OIDC client 配置 redirect URI。

最新 Tag（20 条）

查看全部 2 个 Tag →
Tag架构推送时间大小Digest同步期望操作
docker.io/kubeflowmanifestswg/oidc-authservice
:28c59ef
linux/amd64
2023/07/13 17:4321.1 MBsha256:c9450b805ad5…
docker.io/kubeflowmanifestswg/oidc-authservice
:e236439
linux/amd64
2023/07/13 17:4053.0 MBsha256:0246e5226bf2…