skills.rest
lukaskellerstein
lukaskellersteinCOMMUNITY
Explore all skills by this author →
𝕏@lkellersteinGitHub

auth

Deploy and configure Keycloak and OAuth2-proxy authentication infrastructure on Kubernetes.

3|1|Updated Nov 19, 2025
Search Tags:#authentication#kubernetes#helm#sso#oidc#keycloak#oauth2-proxy
One-click install
npx skills add https://github.com/lukaskellerstein/claude-my-marketplace --skill auth-lukaskellerstein
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth
Source: https://github.com/lukaskellerstein/claude-my-marketplace/tree/main/plugins/infra-plugin/skills/auth
Command: npx skills add https://github.com/lukaskellerstein/claude-my-marketplace --skill auth-lukaskellerstein

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Setting up authentication infrastructure on Kubernetes involves many moving parts: deploying an identity provider, configuring realms and clients, wiring user federation, and protecting applications with a proxy. This Skill provides ready-to-adapt Helm values, Kubernetes manifests, and API commands for Keycloak and OAuth2-proxy so you avoid assembling these configurations from scratch. ## Core Features & Use Cases - Keycloak deployment and configuration: Install via Helm or raw Kubernetes manifests, create realms, configure OIDC and SAML clients, and set up LDAP/Active Directory user federation. - OAuth2-proxy integration: Deploy via Helm, run as a sidecar, or wire into nginx ingress external auth and Istio RequestAuthentication/AuthorizationPolicy. - Troubleshooting and security guidance: Commands for inspecting logs, testing token exchange, decoding JWTs, plus best practices for secrets rotation, cookie settings, and token lifespans. - Use Case: You need SSO for a new web app on GKE. Use this Skill to install Keycloak with production Helm values, create a realm and OIDC client via the REST API, then protect the app with OAuth2-proxy through nginx ingress annotations. ## Quick Start Ask the assistant to deploy Keycloak and OAuth2-proxy on your Kubernetes cluster and configure an OIDC client for your application.

Frequently Asked Questions about auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy Keycloak on Kubernetes with Helm?▼

Add the Bitnami Helm repository and install the keycloak chart into an auth namespace with a production values file. The values configure an admin secret, PostgreSQL with an existing secret, resource limits, and an ingress with TLS via cert-manager.

How to protect a web app with OAuth2-proxy and nginx ingress?▼

Deploy OAuth2-proxy configured with a keycloak-oidc provider, then add auth-url and auth-signin annotations to your application's Ingress resource. Nginx ingress will redirect unauthenticated requests to the proxy, which forwards identity headers to your app.

Can Keycloak connect to LDAP or Active Directory?▼

Yes, Keycloak supports user federation with LDAP and Active Directory through a UserStorageProvider configuration. You specify the connection URL, bind DN, user object classes, and attribute mappings such as sAMAccountName for AD.

Does OAuth2-proxy work with Istio service mesh?▼

Yes, you can combine OAuth2-proxy with Istio by defining a RequestAuthentication resource that validates JWTs against the Keycloak realm's JWKS endpoint, plus an AuthorizationPolicy that enforces required realm roles.

Why is my Keycloak token request failing?▼

Check the Keycloak pod logs, verify the realm's OIDC discovery document at the .well-known/openid-configuration endpoint, and confirm the client ID and secret match. You can decode the JWT payload with base64 to inspect claims.

Related Skills

Explore More Software Engineering Skills→
zystem-iozystem-io
5

expose-zymtrace-backend

Configure Kubernetes ingress or service exposure for a zymtrace backend with TLS.

Official
Intermediate
thehivegroup-aithehivegroup-ai

keycloak-bff-auth

Implement Keycloak BFF authentication with OIDC, JWT verification, and RBAC middleware.

Official
Advanced
cockroachdbcockroachdb
3

managing-tls-certificates

Manage TLS certificates for CockroachDB Cloud and self-hosted deployments.

Official
Advanced
MassimilianoPiliMassimilianoPili

keycloak-oidc

Configure Keycloak OIDC clients, realms, and role mappings for SSO.

Community
Advanced