SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-05-11 10:41:45 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

keycloak support #85

New Issue
Closed
opened 2025-11-20 05:06:07 -05:00 by saavagebueno · 5 comments
saavagebueno commented 2025-11-20 05:06:07 -05:00
Owner
Copy Link

Originally created by @KlavsKlavsen on GitHub (Nov 26, 2021).

Hi guys,
I just found this project and it looks like something I've been wanting for a while.. (and only tailscale does - but I'm not a fan of trusting such services :)

I leave this here to suggest perhaps supporting keycloak as an auth mechanism? Its very widely supported (through OIDC protocol) - here's f.ex. how we setup ArgoCD to allow login via keycloak: https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/user-management/keycloak.md
And you CAN actually also setup keycloak to allow google user account auth - which means keycloak login - will allow you to login with your google account (if thats what you want) or a keycloak user..

Supporting keycloak is a one-stop way to get 2fa, google-auth, with self-hosting support and everything (as keycloak supports these things).

ArgoCd implements it by using https://github.com/coreos/go-oidc

Originally created by @KlavsKlavsen on GitHub (Nov 26, 2021). Hi guys, I just found this project and it looks like something I've been wanting for a while.. (and only tailscale does - but I'm not a fan of trusting such services :) I leave this here to suggest perhaps supporting keycloak as an auth mechanism? Its very widely supported (through OIDC protocol) - here's f.ex. how we setup ArgoCD to allow login via keycloak: https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/user-management/keycloak.md And you CAN actually also setup keycloak to allow google user account auth - which means keycloak login - will allow you to login with your google account (if thats what you want) or a keycloak user.. Supporting keycloak is a one-stop way to get 2fa, google-auth, with self-hosting support and everything (as keycloak supports these things). ArgoCd implements it by using https://github.com/coreos/go-oidc
saavagebueno commented 2025-11-20 05:06:08 -05:00
Author
Owner
Copy Link

@braginini commented on GitHub (Nov 26, 2021):

Thank you fort he suggestion!

We have some discussiona here as well
https://github.com/wiretrustee/wiretrustee-dashboard/issues/9

@braginini commented on GitHub (Nov 26, 2021): Thank you fort he suggestion! We have some discussiona here as well https://github.com/wiretrustee/wiretrustee-dashboard/issues/9
saavagebueno commented 2025-11-20 05:06:08 -05:00
Author
Owner
Copy Link

@braginini commented on GitHub (Nov 26, 2021):

By the way @KlavsKlavsen , what is your main use case?

@braginini commented on GitHub (Nov 26, 2021): By the way @KlavsKlavsen , what is your main use case?
saavagebueno commented 2025-11-20 05:06:08 -05:00
Author
Owner
Copy Link

@KlavsKlavsen commented on GitHub (Nov 26, 2021):

My usecase is to be able to connect to servers behind NAT - from our "travelling workers" - ie. all us working remotely/from home - to be able to access the individual networks we need.. replacing a proprietary VPN.. But in the end I want this to use "temporary keys" - so access is logged and granted (and can be NOT granted f.ex. - for certain users to certain places)..
So developer f.ex. only has access to specific places - and SRE's had access to everything (but access is logged when its opened and when its closed down again) (or just logged with a lifetime logged as well - atleast).
We have a couple of guys who would gladly do PRs as well, if we get it working for us - so hopefully we can contribute something worthwhile too - once it gets there (and we start to use it in production)

@KlavsKlavsen commented on GitHub (Nov 26, 2021): My usecase is to be able to connect to servers behind NAT - from our "travelling workers" - ie. all us working remotely/from home - to be able to access the individual networks we need.. replacing a proprietary VPN.. But in the end I want this to use "temporary keys" - so access is logged and granted (and can be NOT granted f.ex. - for certain users to certain places).. So developer f.ex. only has access to specific places - and SRE's had access to everything (but access is logged when its opened and when its closed down again) (or just logged with a lifetime logged as well - atleast). We have a couple of guys who would gladly do PRs as well, if we get it working for us - so hopefully we can contribute something worthwhile too - once it gets there (and we start to use it in production)
saavagebueno commented 2025-11-20 05:06:08 -05:00
Author
Owner
Copy Link

@KlavsKlavsen commented on GitHub (Nov 26, 2021):

if we get it working with auth0 f.ex. - we'd gladly take a stab at adding keycloak support.

@KlavsKlavsen commented on GitHub (Nov 26, 2021): if we get it working with auth0 f.ex. - we'd gladly take a stab at adding keycloak support.
saavagebueno commented 2025-11-20 05:06:08 -05:00
Author
Owner
Copy Link

@braginini commented on GitHub (Sep 8, 2022):

Solved in
https://github.com/netbirdio/dashboard/issues/9
Integration Docs:
https://netbird.io/docs/integrations/identity-providers/self-hosted/using-netbird-with-keycloak

@braginini commented on GitHub (Sep 8, 2022): Solved in https://github.com/netbirdio/dashboard/issues/9 Integration Docs: https://netbird.io/docs/integrations/identity-providers/self-hosted/using-netbird-with-keycloak
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#85
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?