HiWi Position for Single Sign-On and Kubernetes

December 25th, 2022

Our tech4comp team needs reinforcement to maintain our Kubernetes cluster and our Single Sign-On service Keycloak.

Job Type HiWi
Extent Discussable
Application Deadline 2023/03/31
Status Taken
Contact(s) Alexander Neumann

Keycloak is an open-source identity management system to authenticate users against multiple services using OpenID Conenct (OIDC) or SAML.
It allows us to provide Single Sign-on functionality on multiple of our services, like the ReqiurementsBazaar and las2peer services and it grants us access to our cluster.
To improve user quality, we registered external login services, like Google Auth or RWTH login.
Student workers have to help other projects to connect their services with Keycloak, connect other Identity Providers and do some administrative tasks in the field of user management.

In addition, the workers will help out maintaining our Kubernetes (K8s) cluster or doing cluster related tasks.
Services are running in our K8s cluster as Docker containers.
Kubernetes helps us with easy deployment, container orchestration and load balancing.
Student workers will help other projects to deploy their services in Kubernetes, help updating K8s and cluster nodes or set up and maintain monitoring and development tools, like Prometheus, our private Docker registry, GitLab runner and more.


The following prerequisites would be beneficial, but are not mandatory and can be learned:

  • Protocols like OAuth, OpenID Connect and SAML
  • Keycloak or other Idenetity Provider
  • Java and/or frontend development
  • Kubernetes