search

gardener / gardenctl-v2

Command-line client for the Gardener with focus on operations
Apache License 2.0
25 stars 20 forks source link

Support shell environment without local browser access (e.g. Linux VM) #141

Open ThormaehlenFred opened 2 years ago

ThormaehlenFred commented 2 years ago

What would you like to be added: Support shell environment without local browser access (e.g. Linux VM)

Why is this needed: On a remote Linux VM, there is no local browser access available. In this case OIDC login command should have the following additional parameter: 

- --grant-type=authcode-keyboard

For the Garden clusters this can be added manual (documentation needed) but for seed clusters this should be provided automatically in the downloaded kubeconfig.yaml files.

Maybe a configuration property in gardenctlv2 might make sense. Note: A file watch might not be the best solution, because it would be a OS specific solution and not generic.

Even better it would be if no separate browser window at all would be required but a classic Linux browser in the shell like w3m would be raised and the client certificate should be usable. Then the code would be displayed and could be copied.

petersutter commented 1 year ago

Hi @ThormaehlenFred , do you happen to remember why the --grant-type=auto was not working?