Gateway
The Che gateway routes requests, authenticates users with OpenID Connect (OIDC), and enforces Kubernetes RBAC policies. It controls access to the dashboard, server, plug-in registry, and every user workspace.
This page is for platform administrators and developers evaluating Che as a cloud development platform. To learn more about common roles and example tasks referenced in Che documentation, see Common user roles and tasks.
The Che gateway has the following roles:
-
Routing requests. It uses Traefik.
-
Authenticating users with OpenID Connect (OIDC). It uses OAuth2 Proxy.
-
Applying Kubernetes Role based access control (RBAC) policies to control access to any Che resource. It uses kube-rbac-proxy.
The Che operator manages it as the che-gateway Deployment.
It controls access to:
