Kubectl login subcommand about enhancements HOT 15 CLOSED

@jhorwit2 I don't plan on working on this in the near term. Would be happy to help out for anyone who would like to see this feature and has some cycles to work on it.

from enhancements.

cc @kubernetes/kubectl

from enhancements.

is this an openshift/origin migration feature?

from enhancements.

@adohe openshift has a similar feature yes, but we're very interested in adding it because we use OAuth2 based credentials (the OpenID Connect authenticator). To work with kubectl we need some way of configuring the existing client authenticator plugins[0] for refresh tokens, and also triggering an initial auth flow.

This was discussed in the sig-auth as TODO for 1.4 (meeting notes here [1]) and I wanted to create an feature issue to track this.

[0] kubernetes/kubernetes#23066
[1] https://docs.google.com/document/d/1woLGRoONE3EBVx-wTb4pvp4CI7tmLZ6lS26VTbosLKM/edit#heading=h.cyshlrkb379

from enhancements.

FYI: there is a draft Best Current Practice for native apps and OAuth

https://tools.ietf.org/html/draft-ietf-oauth-native-apps-03

from enhancements.

I've not been able to get the PRs up in time so I'm bumping the release.

from enhancements.

@ericchiang is there any progress on the feature development?

from enhancements.

@idvoretskyi no there's not. Dropping the milestone for now until we have time to work on it a bit more.

from enhancements.

@ericchiang thank you.

from enhancements.

Are there any plans to finish this feature in any upcoming releases this year?

from enhancements.

Greetings @ericchiang, et al.,

At Nike, we have functionality similar to this proposal that currently lives in an internal fork of kubectl. We are now in a position to contribute to this feature and upstream some of the work we've done.

What would your desired next steps be for us to contribute to this feature and upstream the code we have?

from enhancements.

@rji discussing a proposal through sig-auth would be a good place to start.

For those following this issue, there's a PR opened recently to implement some of this kubernetes/kubernetes#55514

from enhancements.

cc: @easeway

from enhancements.

@ericchiang @kubernetes/sig-auth-feature-requests any progress on this feature is expected?

from enhancements.

Closing in favor of #541

from enhancements.