Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

adding certificate-data/key not working #1053

Open
InsOpDe opened this issue Feb 19, 2024 · 0 comments
Open

adding certificate-data/key not working #1053

InsOpDe opened this issue Feb 19, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@InsOpDe
Copy link

InsOpDe commented Feb 19, 2024

Describe the issue

I need to use a client-certificate and client-key. But when I try to add it to the config, Im getting

Error from server (Forbidden): pods is forbidden: User "system:anonymous" cannot list resource "pods" in API group "" in the namespace "xxx"

To reproduce

image

Your environment

  • OS: ubuntu 20.05.5 LTS
  • kubelogin version: v1.28.0
  • kubectl version: v1.28.2
  • OpenID Connect provider: Keycloak (appears to be)

It seems that, adding client-certificate or client-certificate-data skips the login with the plugin.
This works:
image

I understand that the "oidc-login" plugin does not provide a way to add these certificates, however client.authentication.k8s.io/v1beta1 has these within the state property. Is there a way to specify the certificate files or their contents within the kubelogin-plugin config?

@InsOpDe InsOpDe added the bug Something isn't working label Feb 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant