# Kubernetes auth method

**URL:** <https://discuss.hashicorp.com/t/kubernetes-auth-method/2875>\
**Category:** Vault\
**Tags:** k8s\
**Created:** [September 18, 2019, 8:42am UTC](https://discuss.hashicorp.com/t/kubernetes-auth-method/2875 "2019-09-18T08:42:09Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jpiccaluga](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/jpiccaluga/32/2282_2.png) [@jpiccaluga](https://discuss.hashicorp.com/u/jpiccaluga)\
**Post date:** [September 18, 2019, 8:42am UTC](https://discuss.hashicorp.com/t/kubernetes-auth-method/2875/1 "2019-09-18T08:42:09Z")

</div>

Hello Community,

In kubernetes auth method scenario, Vault must validate the JWT token against kubernetes TokenVerifier API. This is problematic in the case where the Vault instance don’t have networking access to the Kubernetes API Server.  
Is it possible to use a static key instead of the kubernetes TokenVerifier API to verify the JWT token provided by Kubernetes?

---

<div class="post-metadata">

**Author:** ![michelvocks](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/michelvocks/32/999_2.png) [@michelvocks](https://discuss.hashicorp.com/u/michelvocks)\
**Post date:** [September 18, 2019, 9:39am UTC](https://discuss.hashicorp.com/t/kubernetes-auth-method/2875/2 "2019-09-18T09:39:32Z")

</div>

Hi @jpiccaluga,

No, I don’t think this is possible with the Kubernetes Authentication engine but maybe the [JWT/OIDC Authentication engine](https://www.vaultproject.io/docs/auth/jwt.html) could be used to achieve what you are trying to do?

Cheers,  
Michel