winget install --id=sikalabs.sikalabs-kubernetes-oidc-login -e sikalabs-kubernetes-oidc-login is a simple command-line tool that performs OIDC login and outputs Kubernetes ExecCredential for kubectl
SikaLabs (sikalabs.com) | Ondrej Sika (sika.io) | Skoleni Kubernetes 🚀💻
sikalabs-kubernetes-oidc-login is a simple command-line tool that performs OIDC login and outputs Kubernetes ExecCredential for kubectl. It allows users to authenticate with an OIDC provider and obtain the necessary credentials to access Kubernetes clusters.
This project has been heavily inspired by int128/kubelogin.
brew install sikalabs/tap/sikalabs-kubernetes-oidc-login
go install github.com/sikalabs/sikalabs-kubernetes-oidc-login@latest
slu install-bin sikalabs-kubernetes-oidc-login
curl -fsSL https://raw.githubusercontent.com/sikalabs/sikalabs-kubernetes-oidc-login/refs/heads/master/install.sh | sudo sh
Try it from CLI
sikalabs-kubernetes-oidc-login \
--oidc-issuer-url https://sso.sikademo.com/realms/sikademo \
--oidc-client-id kubernetes \
--oidc-client-secret kubernetes_secret
In kubeconfig.yaml
apiVersion: v1
kind: Config
clusters:
- cluster:
insecure-skip-tls-verify: true
server: https://rke2.sikademo.com:6443
name: sikademo
contexts:
- context:
cluster: sikademo
user: sikademo
name: sikademo
current-context: sikademo
users:
- name: sikademo
user:
exec:
apiVersion: client.authentication.k8s.io/v1beta1
command: sikalabs-kubernetes-oidc-login
args:
- oidc-login
- get-token
- --oidc-issuer-url=https://sso.sikademo.com/realms/sikademo
- --oidc-client-id=kubernetes
- --oidc-client-secret=kubernetes_secret
env: null
interactiveMode: IfAvailable
provideClusterInfo: false
And run standard kubectl commands like
kubectl get nodes