infra

README

Introduction

Infra is identity and access management for Kubernetes. Provide any user fine-grained access to Kubernetes clusters via existing identity providers such as Okta, Google Accounts, Azure Active Directory and more.

Features:

• One-command access: infra login
• Fine-grained permissions
• Onboard & offboard users via Okta (Azure AD, Google, GitHub coming soon)
• Audit logs for who did what, when (coming soon)
• CLI & REST API
• Configure via infra.yaml

Quickstart

Install Infra

helm repo add infrahq https://helm.infrahq.com
helm install infra infrahq/infra

Infra exposes an external ip via a load balanacer. To list services and check which IP is exposed, run:

kubectl get svc infra

Install Infra CLI

macOS & Linux

brew install infrahq/tap/infra

Windows

scoop bucket add infrahq https://github.com/infrahq/scoop.git
scoop install infra

Log in

infra login <EXTERNAL-IP>

Great! You're now logged in to the cluster via Infra.

Adding users

• Connect Okta
• Add users manually

Documentation

• Connect another cluster
• Add a custom domain
• CLI Reference
• Configuration Reference
• Contributing

Security

We take security very seriously. If you have found a security vulnerability please disclose it privately to us by email via security@infrahq.com