Kubernetes auth method

Vault
1

Hello Community,

In kubernetes auth method scenario, Vault must validate the JWT token against kubernetes TokenVerifier API. This is problematic in the case where the Vault instance don’t have networking access to the Kubernetes API Server.
Is it possible to use a static key instead of the kubernetes TokenVerifier API to verify the JWT token provided by Kubernetes?

2

Hi @jpiccaluga,

No, I don’t think this is possible with the Kubernetes Authentication engine but maybe the JWT/OIDC Authentication engine could be used to achieve what you are trying to do?

Cheers,
Michel