I've a Kubernetes deployment on Azure (AKS) and I also deployed the k8s dashboard.
I've connected the k8s deployment to our Azure Active Directory (AAD) so we can use the kubectl command with our AAD login (steps here: https://docs.microsoft.com/en-us/azure/aks/azure-ad-integration-cli).
I also want to be able to authenticate the dashboard through AAD. I deployed pusher oauth2_proxy (https://github.com/pusher/oauth2_proxy) in front of my server to achieve this.
My problem is: I can give kubernetes dashboard service account admin-rights and use that token to authenticate. This means that everyone who authenticates against our AD will get full access rights. But, I need to be able to filter permissions depending on the user logged in. In oauth2_proxy, there is a flag --pass-authorization-header (which adds "Authorization: Bearer TOKEN" to the headers) but it seems that you can only use a service account token in the dashboard and not user tokens.
Is there any way to work around this?