Authentication Strategies

Choosing and configuring the appropriate authentication strategy.

Kiali supports five authentication mechanisms:

The default authentication strategy for OpenShift clusters is openshift.
The default authentication strategy for all other Kubernetes clusters is token.

All mechanisms other than anonymous support Role-based access control.

Read the dedicated page of each authentication strategy to learn more.

Access Kiali with no authentication.

Run Kiali behind a reverse proxy responsible for injecting the user’s token, or a token with impersonation.

Access Kiali requiring authentication through a third-party OpenID Connect provider.

Access Kiali requiring OpenShift authentication.

Access Kiali requiring a Kubernetes ServiceAccount token.