micahhausler / k8s-oidc-helper

Helper tool for authenticating to Kubernetes using Google's OpenID Connect
MIT License
201 stars 86 forks source link

How to do it without client id secret in the client side? #28

Open alok87 opened 5 years ago

alok87 commented 5 years ago

Use case: We are making a command line tool which will authenticate with google and configure the kubernetes access.

We thought of using the code here but: 1) We do not want to create client id and secret for every developer. 2) Also, we cannot hard code client id and secret in the binary as this client id and secret can be used to impersonate the application.

Please suggest.

More information -