Live data from Hacker News

Launch HN: Infra (YC W21) – Open-source access management for Kubernetes

github.com

21–30 of 59 posts

Re: Launch HN: Infra (YC W21) – Open-source access management for Kubernetes

#22
post #7

I use rancher for this purpose alone (it can connect to okta, azure, local users...). I might consider using this with its plan to integrate more infra like databases and ssh. For ssh though I'm not sure it could easily replace FreeIPA, unless it integrates with it somehow.

Infra's designed to integrate with existing identity & access tooling (vs replace them). While we don't have a built-in integration for FreeIPA, Infra has a REST API and will integrate with any OpenID-compliant identity provider, meaning you shouldn't have to drop or replace your existing tooling to start using Infra.

super interesting

Re: Launch HN: Infra (YC W21) – Open-source access management for Kubernetes

#23
post #19

Earlier quoted context omitted.

does the standard deployment use a centralized proxy? like it's your Basic Architecture in the diagram in your docs. so i feel like i'm being put on.

Sorry you feel that way! We haven't counted, but my bet is that most smaller deployments just use the single proxy. I also know that most larger deployments use multi-DC and multi-cluster design with independent CAs for availability and latency.

that answers my question perfectly. thank you!

Re: Launch HN: Infra (YC W21) – Open-source access management for Kubernetes

#28
I wish I had this at my previous job. Our k8s roles were basically everything or unusable. Managing anything fine grained was such a pain that it wasn't worth it.

Just went through the quickstart and that's some top-notch developer experience, great job.

Post reply on HN