Hi,
I’m trying to use okta as SSO for k8s
I’ve using the “/token” endpoint to fetch the id_token and the refresh token
and putting the following data in my kube config file with this command:
kubectl config set-credentials {USER}
–auth-provider=oidc
–auth-provider-arg=idp-issuer-url={ISSUER}
–auth-provider-arg=client-id={CLIENT_ID}
–auth-provider-arg=client-secret={SECRET}
–auth-provider-arg=refresh-token={REFRESH_TOKEN}
–auth-provider-arg=id-token={ID_TOKEN}
still when I add new context with my {USER} im getting this message:
“error: You must be logged in to the server (Unauthorized)”
and in the pod logs i’m seeing - “Unable to authenticate the request due to an error: invalid bearer token”
I guess I’m missing something any ideas?
Thanks