OAuth2-Proxy
Forward authentication proxy for protecting services without native OIDC support.
Forward authentication proxy for protecting services without native OIDC support.
Secrets management platform (HashiCorp Vault fork) for secure credential storage and dynamic secrets.
Service-to-service authentication for accessing OpenBao secrets.
OpenBao is configured to automatically unseal using Google Cloud KMS.
How Norns authenticates to OpenBao and fetches secrets at startup.
OIDC authentication for human access to OpenBao UI via Zitadel SSO.
Fine-grained authorization service for relationship-based access control.
SPIFFE Runtime Environment for workload identity and service-to-service authentication.
OIDC/SSO identity provider for RavenmaskOS.