How to generate X509 Client Certs

[dstockhammer]

Hi there,

looks like I made a bit of a mistake assuming that adding users would be easy. I've provisioned a cluster without passing OIDC arguments to the API server and it looks like it's not possible to edit those for an existing cluster. I've also hit the Hetzner resource limits, so I'm stuck with this cluster until I can request an increase (so I can provision a new cluster to replace the old one).

Until that time I hope that I can use X509 Client Certs to give credentials to users so they can log in to the cluster and apply RBAC. I tried to follow the instructions but I'm struggling to find the certs/keys I need... :(

Can you please elaborate how one is expected to give access to the cluster? Handing out the generated cluster-admin kubeconfig.yaml is not an option for me.

Thanks!