c-alde-talos-poc2 Kubeconfig

[download]apiVersion: "v1"
clusters:
- cluster:
    certificate-authority-data: "LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJpekNDQVRDZ0F3SUJBZ0lSQUtjNHF1VW9sUWc1RGI1UENDa2xiMWN3Q2dZSUtvWkl6ajBFQXdJd0ZURVQKTUJFR0ExVUVDaE1LYTNWaVpYSnVaWFJsY3pBZUZ3MHlOakE1TVRVeE1qSXhNREZhRncwek5qQTVNVEl4TWpJeApNREZhTUJVeEV6QVJCZ05WQkFvVENtdDFZbVZ5Ym1WMFpYTXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CCkJ3TkNBQVNzajMvVkpHSWRmakpObHFZTEVqK0dYZDVVSWtZMkU3YUFvS0xqU3BjdkJTbi84REpUMkpQeEppa24KWUc4QU1jUGRad2RYNzQ4SVE1Z3psTE1yTTE5aG8yRXdYekFPQmdOVkhROEJBZjhFQkFNQ0FvUXdIUVlEVlIwbApCQll3RkFZSUt3WUJCUVVIQXdFR0NDc0dBUVVGQndNQ01BOEdBMVVkRXdFQi93UUZNQU1CQWY4d0hRWURWUjBPCkJCWUVGUENGcVEzYWlIdWx3N09Nbk1QcTZoUXVjOW1wTUFvR0NDcUdTTTQ5QkFNQ0Ewa0FNRVlDSVFEMzlzUnQKem9rWlcrT1FvMkl3d09PbmRGV1ZIOEk4RHE4eEt5NzBxV0FZbndJaEFNdXY2WjJINklRME91dlJhbnRwZitKSApUbkVNcWQ0aC9uZ2s2S08zSDlINQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg=="
    server: "https://api.c-alde-talos-poc2.appuio-beta.ch:6443"
  name: "c-alde-talos-poc2"
contexts:
- context:
    cluster: "c-alde-talos-poc2"
    user: "oidc"
  name: "oidc@c-alde-talos-poc2"
current-context: "oidc@c-alde-talos-poc2"
kind: "Config"
users:
- name: "oidc"
  user:
    exec:
      apiVersion: "client.authentication.k8s.io/v1beta1"
      args:
      - "oidc-login"
      - "get-token"
      - "--oidc-issuer-url=https://id.vshn.net/auth/realms/vshn-realm"
      - "--oidc-client-id=appuio-managed-int_c-alde-talos-poc2"
      - "--oidc-extra-scope=email offline_access profile openid"
      command: "kubectl"
      interactiveMode: "IfAvailable"
      provideClusterInfo: false

First time setup

1. Make sure you have a recent kubectl installed. See the upstream docs for install instructions.
2. Download the kubectl kubelogin plugin and ensure it’s available in your $PATH as kubectl-oidc_login
3. Verify that the plugin is available.
   

   kubectl oidc-login --version

4. Download this cluster’s kubeconfig
5. Set the $KUBECONFIG environment variable
   

   export KUBECONFIG=~/Downloads/c-alde-talos-poc2.kubeconfig

6. Test access
   

   kubectl auth whoami

   If everything is setup correctly, this should authenticate you with your VSHN account in your browser and then show some details about your user.