如何使用kubernetes配置openid-connect

时间:2017-07-26 10:21:17

标签: kubernetes openid-connect

  kubectl config set-credentials USER_NAME \
   --auth-provider=oidc \
   --auth-provider-arg=idp-issuer-url=( issuer url ) \
   --auth-provider-arg=client-id=( your client id ) \
   --auth-provider-arg=client-secret=( your client secret ) \
   --auth-provider-arg=refresh-token=( your refresh token ) \
   --auth-provider-arg=idp-certificate-authority=( path to your ca certificate ) \
   --auth-provider-arg=id-token=( your id_token ) \
   --auth-provider-arg=extra-scopes=( comma separated list of scopes to add to "openid email profile", optional )

这是否足以配置与kubernetes的openid-connect? 有人可以告诉我

的价值是什么

1。发行人网址  2.刷新令牌  3.获得证书的途径  超范围  5. id-token

另外,为了确认,我想知道客户端密码和客户端ID是否与创建的Google凭据相同

0 个答案:

没有答案