For user who does not have GUI

[pbs-jyu]

Describe the question

From the demo, after we run "kubectl get " it will automatically open a browser and asking for authentication.

To reproduce

I use a Ubuntu server without GUI. Not sure how this get proceed. obviously we need to pick a OIDC provider authentication. I'm planning use Dex with Azure AD.

Your environment

• OS: e.g. Ubuntu Server, no GUI

• kubelogin --version
  kubelogin version
  git hash: v0.1.0/0fcd072d45250a50cde855cf50204ad2dc784095
  Go version: go1.21.5
  Build time: 2023-12-28T19:01:42Z
  Platform: linux/amd64

• kubectl version: e.g. v1.29.13

• OpenID Connect provider: Azure AD

[SISheogorath]

You want to use the paramter --grant-type device-code, which will allow the usage with headless/browserless devices. Instead you'll get a URL from your identity provider that you can copy to your webbrowser, even on a different device and authorize the access from there.

This is part of the OIDC standard. https://www.oauth.com/oauth2-servers/device-flow/ Keep in mind, this is not intended for Machine-to-Machine authentication.