Authentication Mechanisms in Kubernetes: A Systematic Review and the Case for Threshold-Based Token Signing
Kubernetes has become the de facto orchestration platform for containerized workloads, managing authentication and authorization for millions of API requests across production clusters worldwide. This paper presents a survey and research-position paper that systematically reviews authentication mechanisms in Kubernetes, covering X.509 client certificates, bearer tokens, service account tokens, OpenID Connect (OIDC), webhook token authentication, and the recently stabilized External JWT Signer interface (v1.36)...
Authors
- Anju Kakkad
- Rahul Kurmi
- Shivangi Patel
Institutions
- RK University (IN)
Publication Details
- Journal
- Zenodo (CERN European Organization for Nuclear Research)
- Published
- 2026-06-17
- DOI
- https://doi.org/10.5281/zenodo.20734453
- Primary Topic
- Web Application Security Vulnerabilities
- Type
- preprint