From 6f417cd30cab4da1ff0a41843b220dac8ab27802 Mon Sep 17 00:00:00 2001 From: Hidetake Iwata Date: Fri, 8 Nov 2019 10:13:19 +0900 Subject: [PATCH] Add screencast (#186) * Update README.md * Update README.md * Update README.md --- README.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 369fe970..ae5de68e 100644 --- a/README.md +++ b/README.md @@ -2,10 +2,14 @@ This is a kubectl plugin for [Kubernetes OpenID Connect (OIDC) authentication](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#openid-connect-tokens), also known as `kubectl oidc-login`. -This is designed to run as a [client-go credential plugin](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins). +Here is an example of Kubernetes authentication with the Google Identity Platform: + +screencast + +Kubelogin is designed to run as a [client-go credential plugin](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins). When you run kubectl, kubelogin opens the browser and you can log in to the provider. Then kubelogin gets a token from the provider and kubectl access Kubernetes APIs with the token. -Take a look at the following diagram: +Take a look at the diagram: ![Diagram of the credential plugin](docs/credential-plugin-diagram.svg)