# Truster

> Truster is a minimal OIDC provider that lets your team authenticate to Kubernetes clusters using their existing Google or GitHub accounts.


## Documentation
- [Understanding OAuth2 and OIDC](https://truster.dev/docs/oidc-primer/): This page provides a beginner-friendly introduction to OAuth2 and OpenID Connect (OIDC), the …
- [Concepts and terminology](https://truster.dev/docs/concepts/): Truster sits between the service that signs a user in, and the application or Kubernetes cluster …
- [Getting Started](https://truster.dev/docs/getting-started/): Start with the local demo to see how Truster works. It takes only a few minutes, needs no cloud …
- [Truster System Design & Specification](https://truster.dev/docs/spec/): Truster is a minimal OIDC provider designed primarily for Kubernetes. It federates authentication to …
- [Why Truster?](https://truster.dev/docs/why-truster/): Truster lets people sign in to Kubernetes with an account they already have or a code sent by email. …
- [Kubernetes Integration](https://truster.dev/docs/kubernetes/): This guide is for cluster administrators configuring Kubernetes to trust Truster. For the user-side …
- [Using kubelogin for kubectl Authentication](https://truster.dev/docs/kubelogin/): kubelogin , also invoked as kubectl oidc-login, is a user-side Kubernetes exec credential plugin. It …
- [App Integration Guide For Developers](https://truster.dev/docs/app-integration/): App Integration Guide For DevelopersThis page describes a recommended way for developers to use …
- [Configuration Reference](https://truster.dev/docs/config/): Truster reads a JSONC configuration file. Run it with truster serve --config config.jsonc or set …
- [DPoP Integration](https://truster.dev/docs/dpop/): DPoP integrationDPoP protects access and refresh tokens if they are copied. The SPA or BFF keeps a …
- [Policy Database](https://truster.dev/docs/policy-database/): A policy database lets Truster use PostgreSQL to decide which clients and users may sign in, which …
- [State Database](https://truster.dev/docs/state-database/): State databaseBy default, Truster uses SQLite for persisting OIDC protocol state such as …
- [Troubleshooting](https://truster.dev/docs/troubleshooting/): Start with the component that reports the error. Keep issuer URLs, client IDs, timestamps, and …

### Sign-in Providers
- [GitHub Upstream Auth](https://truster.dev/docs/upstream/github/): This guide connects GitHub as a sign-in provider. GitHub verifies the user’s GitHub account; …
- [Google Upstream Auth](https://truster.dev/docs/upstream/google/): This guide connects Google as a sign-in provider. Google verifies the user’s Google account; …

### Deploy
- [Deploy on Kubernetes](https://truster.dev/docs/deploy/kubernetes/): Truster publishes a Linux AMD64 and ARM64 container image and an OCI Helm chart with each release. …
- [Deploy to AWS using OpenTofu/Terraform](https://truster.dev/docs/deploy/aws/): This guide deploys a persistent Truster issuer on AWS with Google sign-in and one kubelogin client. …
- [Deploy to Google Cloud using OpenTofu/Terraform](https://truster.dev/docs/deploy/google/): This guide deploys a persistent Truster issuer on Google Cloud with Google sign-in and one kubelogin …
- [Run locally for development and testing](https://truster.dev/docs/deploy/local/): This guide runs Truster and a local email inbox on your computer. It is the fastest way to try a …


---
Generated on 2026-09-18 13:34:17 UTC
Site: https://truster.dev/