Skip to content

Pre-vallidate OIDC provider before generating kubeconfig with interactive login #2793

@kwiatekus

Description

@kwiatekus

Description

When generating kubeconfig for oidc,

kyma alpha kubeconfig generate --oidc-name

Before producing a kubeconfig with interactive login, check if the issuer is supporting it.
We could inspect the ${ISSUER_URL}.well-known/openid-configuration endpoint to check if the authorization_endpoint is present in the response. If, not, return with error, as such issuer is headless-only, suitable for ci/cd pipelines only and interactive login via browser is not possible.

Reasons

With CLI user should be able to avoid misconfigurations

Metadata

Metadata

Assignees

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions