Authentication Strategies

Choosing and configuring the appropriate authentication strategy.

Kiali supports five authentication mechanisms.

The default authentication strategy for OpenShift clusters is openshift.
The default authentication strategy for all other Kubernetes clusters is token.

All mechanisms other than anonymous support limiting per-user namespace access control.

For multi-cluster, only anonymous and openid are currently supported.

Read the dedicated page of each authentication strategy to learn more.

Access Kiali with no authentication.

Run Kiali behind a reverse proxy responsible for injecting the user’s token, or a token with impersonation.

Access Kiali requiring authentication through a third-party OpenID Connect provider.

Access Kiali requiring OpenShift authentication.

Access Kiali requiring a Kubernetes ServiceAccount token.

Session timeout and signing key configuration