Add JWT Authentication page for v2.9 feature rancher#1373

LucasSaintarbor · Jul 24, 2024 · d3a8967 · d3a8967
1 parent 2d6ede4
commit d3a8967
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 1 deletion.
diff --git a/...uides/authentication-permissions-and-global-configuration/jwt-authentication.md b/...uides/authentication-permissions-and-global-configuration/jwt-authentication.md
@@ -0,0 +1,22 @@
+---
+title: JWT Authenticaiton
+---
+<!-- Edit Canonical Link -->
+<head> 
+  <link rel="canonical" href="https://ranchermanager.docs.rancher.com/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/jwt-authentication"/>
+</head>
+
+Many 3rd party integrations available for Kubernetes, such as Gitlab and Hashicorp Vault, involve giving an external process access to the Kubernetes API using a native Kubernetes Service Account token for authentication.
+
+In Rancher v2.9.0 and later, you can enable a downstream cluster to support JWT authentication of tokens created for a service account on a downstream cluster through the Rancher authentication proxy. Prior to this feature, Rancher rejects such requests because Rancher only supports Rancher-issued tokens.
+
+:::note
+JWT authentication is also known as service account token authentication.
+:::
+
+To enable this feature, follow these steps:
+
+1. In the upper left corner, click **☰ > Cluster Management**.
+1. Click **Advanced** to open the dropdown menu.
+1. Select **JWT Authentication**.
+1. Click the checkbox for the cluster you want to enable JWT authentication for, and click **Enable**. Alternatively, you can click **⋮** > **Enable**.
diff --git a/sidebars.js b/sidebars.js
@@ -321,7 +321,7 @@ const sidebars = {
                 "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards",
                 "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates",
                 "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry",
-
+                "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/jwt-authentication",
                 "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/custom-branding",
               ]
             },