Gateway

To understand how Che routes requests and authenticates users, review the gateway component that uses Traefik for routing and OpenID Connect for authentication.

The Che gateway has the following roles:

  • Routing requests. It uses Traefik.

  • Authenticating users with OpenID Connect (OIDC). It uses OAuth2 Proxy.

  • Applying Kubernetes Role based access control (RBAC) policies to control access to any Che resource. It uses kube-rbac-proxy.

The Che operator manages it as the che-gateway Deployment.

It controls access to:

Che gateway interactions with other components
Figure 1. Che gateway interactions with other components
Additional resources