Kubernetes support
This release adds experimental support for Kubernetes targets.
Warpgate will proxy and record Kubernetes API protocol as well as attach/exec sessions.
Both token and certificate authentication is supported both between Warpgate and Kubernetes and Warpgate and the user, as well as web-based 2FA.
There is now an option to issue and revoke certificate credentials for users (currently for Kubernetes only).
Notes:
- Warpgate API tokens can be used on the client to authenticate against Kubernetes targets
- When using browser-based 2FA, there is no way for us to communicate the prompt to the user, so they need to log into the Warpgate UI separately to see it.
Changes
- Kubernetes target support - #1530
- Experimental support for Kubernetes targets, with support for recordings, REST and Websocket Kubernetes APIs, kubectl and third-party clients
- fixed #1664 - offer API at an alternative /_warpgate/ URL - #1737
- This allows using an alternative
_warpgatereturn URL for Azure OIDC, which does not allow the@character.
- This allows using an alternative
- Allow for minimizing the password login UI by @LarsSven in #1750
- For SSO-first environments, this allows hiding the password login option by default
Full Changelog: v0.20.2...v0.21.0