infra

README

Introduction

Infra is identity and access management for Kubernetes. Provide any user fine-grained access to Kubernetes clusters via existing identity providers such as Okta, Google Accounts, Azure Active Directory and more.

Features:

• One-command access: infra login
• Fine-grained permissions
• Onboard & offboard users via Okta (Azure AD, Google, GitHub coming soon)
• Audit logs for who did what, when (coming soon)

Quickstart

Install Infra

helm repo add infrahq https://helm.infrahq.com
helm install infra infrahq/infra

Infra exposes an external IP address via a load balanacer. To list services and check which IP address is exposed, run:

kubectl get svc infra

Install Infra CLI

macOS & Linux

brew install infrahq/tap/infra

Windows

scoop bucket add infrahq https://github.com/infrahq/scoop.git
scoop install infra

Login to Infra

infra login <EXTERNAL-IP>

Switch Kubernetes context

kubectl config use-context default

Great! You're now logged into the cluster via Infra.

Next steps

• Add users to Infra
  • Add users via Okta integration
  • Add users manually
• Connect another Kubernetes cluster
  • Connect another cluster
• Add a custom domain to infra login for quick access

Documentation

• CLI Reference
• Configuration Reference
• Contributing

Security

We take security very seriously. If you have found a security vulnerability please disclose it privately to us by email via security@infrahq.com