Configure OIDC provider for clusters

This issue documents necessary information on how to configure a gardener shoot cluster to support an OIDC provider:

It would be necessary to configure the shoot cluster as well as the generated kubeconfig. The manual process for this is documented here

Afterwards, logging in to the cluster can be done via kubelogin

The necessary gardener extension would be the following

Please add here the required Properties given from a Customer during cluster creation to make this possible.

This should be the added to the ClusterCreateRequest.

Required properties would be: clientID, issuerURL and usernameClaim for configuring the shoot cluster.

Required properties would be: clientID, issuerURL and usernameClaim for configuring the shoot cluster.

So if this is enough the following struct should be added to the ClusterCreateRequest:

message OIDC {
  string client_id = 1;
  string issuer_url = 2;
  string username_claim = 3;
}

Navigation Menu