-
Notifications
You must be signed in to change notification settings - Fork 8
Description
Hi there 👋
I hope this doesn't come off as spam. I just wanted to show off a tool we built that might be useful for others: https://github.com/orbit-online/step-plugin-kmsproxy
It's a local MITM proxy that uses step-kms to authenticate towards webservices using mTLS.
Since it's a standard proxy it works with all major OS'es, browser, and most CLI tools (even kubectl through the proxy-url setting in ~/.kube/config.yaml.
It's pretty fresh, so there are definitely some bugs that will need ironing out (e.g. haven't tested it on Windows & macOS yet and the install guide is Linux only for now). Most importantly, there are no tests atm.
The guide is aimed at workstations right now. It might also be useful for servers and the like, but I'll need to figure some usecases before it makes sense to mention that.
p.s.: Smallstep is awesome! Thank you for all the hard work ❤