## Overview Pinniped provides identity services to Kubernetes. Pinniped allows cluster administrators to easily plug in external identity providers (IDPs) into Kubernetes clusters. This is achieved via a uniform install procedure across all types and origins of Kubernetes clusters, declarative configuration via Kubernetes APIs, enterprise-grade integrations with IDPs, and distribution-specific integration strategies. ### Example Use Cases * Your team uses a large enterprise IDP, and has many clusters that they manage. Pinniped provides: * Seamless and robust integration with the IDP * Easy installation across clusters of any type and origin * A simplified login flow across all clusters * Your team shares a single cluster. Pinniped provides: * Simple configuration to integrate an IDP * Individual, revocable identities ### Architecture Pinniped offers credential exchange to enable a user to exchange an external IDP credential for a short-lived, cluster-specific credential. Pinniped supports various IDP types and implements different integration strategies for various Kubernetes distributions to make authentication possible. To learn more, see [doc/architecture.md](doc/architecture.md). ## Trying Pinniped Care to kick the tires? It's easy to [install and try Pinniped](doc/demo.md). ## Discussion Got a question, comment, or idea? Please don't hesitate to reach out via the GitHub [Discussions](https://github.com/vmware-tanzu/pinniped/discussions) tab at the top of this page. ## Contributions Contributions are welcome. Before contributing, please see the [contributing guide](doc/contributing.md). ## Reporting Security Vulnerabilities Please follow the procedure described in [SECURITY.md](SECURITY.md). ## License Pinniped is open source and licensed under Apache License Version 2.0. See [LICENSE](LICENSE). Copyright 2020 the Pinniped contributors. All Rights Reserved.