How to expose Kubernetes OIDC JWKS endpoints

Comments (1)

gawsoft · 5h ago

Kubernetes supports OIDC authentication, enabling identity integration with other platforms or systems, where you can authenticate kubernetes jwt tokens. However, there's a hidden challenge with securely exposing the OIDC discovery endpoints (i.e. /.well-known/openid-configuration and /openid/v1/jwks) from the Kubernetes API Server and also preventing anonymous access.

How to build the Stasheff Associahedron out of a trefoil knot (francisrlb.com)

Show HN: A Modular Phoenix SaaS Starter Kit (phoenixsaaskit.com)

The U.S. Central Intelligence Agency's (CIA) remote viewing experiments (pmc.ncbi.nlm.nih.gov)

What if sailing had no rules? [video] (youtube.com)

LLMs are bad at returning code in JSON (aider.chat)

Conspiracy theorists think their views are mainstream (arstechnica.com)

US drops sanctions on Myanmar junta's allies after military chief praises man (abc.net.au)

Show HN: Mapping supply chain of products (updated) (beneluxmanufacturing.com)

The Internet Archive just became an official U.S. federal library (mashable.com)

Astronomer's 'clever' PR move embracing CEO scandal – featuring Gwyneth Paltrow (bbc.co.uk)

djbwares version 10 (jdebp.uk)

Exploring Windows XP on macOS ARM64 (milen.me)

Careers at the Frontier: Hiring the Future at OpenAI (forum.openai.com)

JANET – The UK Joint Academic Network (1988) [pdf] (serials.uksg.org)

Constrained languages are easier to optimize (jyn.dev)

Using Codex-CLI with ChatGPT Plus/Pro (github.com)

Draw a fish and watch it swim (drawafish.com)

Has the Qianfan satellite network – China's Starlink rival – run into trouble? (scmp.com)

Scala Highlights June 2025 – Scala 3.9 will be the new LTS (scala-lang.org)

Ronald Coase (1960) – The Problem of Social Cost [pdf] (law.uchicago.edu)

Apocalyptica (medium.com)

Four ways of declaring interfaces in Haskell (marcosh.github.io)

Who Likes Authoritarianism? (pewresearch.org)

Libu8ident: Unicode security guidelines for programming language identifiers (github.com)

Emad Mostaque: The Plan to Save Humanity from AI [video] (youtube.com)

Thank You for Finding Me (longreads.com)

Making Cloudflare Pages Faster with Cloudflare's CDN (userbird.com)

Indian film company to rerelease romantic drama with AI 'happy ending' (theguardian.com)

Ask HN: Claude Code vs. ChatGPT Pro?

Show HN: We built a self-aware AI agent,and this is the log of its first mission (github.com)

Age Verification in the EU, Ambitious goals, missed privacy opportunities (docs.yivi.app)

Show HN: (Almost) instant NAICS, UNSPSC, HS code classification (free webapp) (classifast.com)

Tessera: A declarative, immediate-mode UI framework for Rust (github.com)

Mastercard and Visa Under Fire as Petition 'Not Police' Legal Content Blows Up (ibtimes.co.uk)

Attempt to outlaw AI that jacks up prices based on what it knows about you (theregister.com)

NAD+ the New Collagen? The Anti-Ageing Molecule Everyone's Talking About (marieclaire.co.uk)

I Saved a PNG Image to a Bird [video] (youtube.com)

Why Are Quiet Spaces Disappearing? (honest-broker.com)

Show HN: DogNamesWorld – A fast dog name directory built with Astro (dognamesworld.com)

Thorpe is a SWE at a startup – he's also serving his 11th year in prison (techcrunch.com)

Myo Gesture Armband Teardown (learn.adafruit.com)

Show HN: ExtractQ cuts auto-insurance claim time 75% with zero-training AI (scalong.com)

Study Suggests Covid Shots Saved Fewer Lives Compared with Prior Estimates (medpagetoday.com)

Multi vs. Single Page Apps – two implementations comparison (binaryigor.com)

Barbie's new pink (insulin) pumps – help children with type 1 diabetes (science.org)

Climate groups call for wealth tax to make super-rich fund sustainable economy (theguardian.com)

Channel-level EEG analysis systematically misattributes cortical source (neuromechanist.github.io)

San Francisco's AI boom is intensifying battles for workers, housing (washingtonpost.com)

Does visualization help AI understand data? (arxiv.org)

Worlds Largest "Vibe Coding" Hackathon Winner (twitter.com)

How to expose Kubernetes OIDC JWKS endpoints

Comments (1)