You must be logged in to the server

Similiar to https://github.com/mintel/dex-k8s-authenticator/issues/30

for my case, I confirmed:

Confirmed: using the generated config
Confirmed: can reach the idp-issuer-url
Checked that the expected k8s context is in use via kubectl config get-contexts

Confirmed: the middle component and base64 decode it you should be able to confirm the groups that the user have (this is the same level of information that dex-k8s-authenticator provides you when generate the kubeconfig details).

{
"iss": "https://***:5556",
"sub": "***",
"aud": "dex-k8s-authenticator",
"exp": *,
"iat": *,
"at_hash": "*",
"c_hash": "*-*",
"email": "*",
"email_verified": true,
"groups": [
"thi-github-org:thi-team"
],
"name": "thiDucTran",
"preferred_username": "thiDucTran"
}

When checking the api-server log..I see this..has anyone ran into the error below?

E1215 22:03:58.461882       1 authentication.go:63] "Unable to authenticate the request" err="invalid bearer token"
W1215 22:03:58.467004       1 watcher.go:229] watch chan error: etcdserver: mvcc: required revision has been compacted

mintel / dex-k8s-authenticator

You must be logged in to the server #197