0

I have setup k8s single node cluster with kubeadm. I have configured oidc with it and made changes to ~/.kube/config file. Is there any explicit configuration that has to be done to kubectl context or credentials?

I have added the user, client-id, client-secret, id_token and refresh id to the /.kube/config file. Apart from this i have added oidc-issuer-url, oidc-username-claim and oidc-client-id to kube-apiserver.yaml file.

Apart from this is there anything else that has to be added? I assume i am missing something due to which i get error: You must be logged in to the server (the server has asked for the client to provide credentials) when i try the command kubectl --user=name@gmail.com get nodes

NSP
  • 1,193
  • 4
  • 15
  • 26

1 Answers1

0

you may take a look at the log of apiserver to check what error you get during authentication.

And you should add oidc-issuer-url, oidc-username-claim, oidc-client-id, and --oidc-ca-file in apiserver.yaml.

Jian Qiu
  • 26
  • 1