github/kubelogin
1
0
Fork 0
mirror of https://github.com/int128/kubelogin.git synced 2026-02-14 16:39:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

Refactor setup command and docs (#1253)

Browse Source 
* Refactor setup command and docs

* Fix slice flags

* Fix
This commit is contained in:
Hidetake Iwata
2025-01-25 16:08:28 +09:00
committed by GitHub
parent 56e09ad65e
commit 3a38753ee7
11 changed files with 269 additions and 416 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
docs/setup.md
View File

@@ -155,7 +155,7 @@ Leverage the following variables in the next steps.
`YOUR_CLIENT_SECRET` is not required for this configuration.
## 2. Verify authentication
## 2. Authenticate with the OpenID Connect Provider
Run the following command:
@@ -169,8 +169,7 @@ kubectl oidc-login setup \
It launches the browser and navigates to `http://localhost:8000`.
Please log in to the provider.
You can set extra options, for example, extra scope or CA certificate.
See also the full options.
For the full options,
```sh
kubectl oidc-login setup --help
@@ -178,14 +177,12 @@ kubectl oidc-login setup --help
## 3. Bind a cluster role
Here bind `cluster-admin` role to you.
You can run the following command to bind `cluster-admin` role to you:
```sh
kubectl create clusterrolebinding oidc-cluster-admin --clusterrole=cluster-admin --user='ISSUER_URL#YOUR_SUBJECT'
```
As well as you can create a custom cluster role and bind it.
## 4. Set up the Kubernetes API server
Add the following flags to kube-apiserver: