int128/kubelogin

Health v2 · maintenance only

Adoption not part of the score

2351 stars · 243 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

kubelogin is a kubectl plugin (kubectl oidc-login) for Kubernetes OpenID Connect authentication, running as a client-go credential plugin. It opens a browser for login, obtains ID and refresh tokens from the OIDC provider, and passes credentials to kubectl for API access.

Use cases

• authenticate kubectl with an OIDC provider like Google Identity Platform or Okta
• log in to Kubernetes clusters via browser-based SSO
• cache and refresh OIDC tokens for kubectl sessions
• set up client-go credential plugin authentication in kubeconfig
• replace static kubeconfig credentials with OIDC-based auth
• manage Kubernetes access for teams using an identity provider

When to choose

• your Kubernetes API server uses OIDC authentication
• you want browser-based SSO login for kubectl
• you need token caching and refresh across kubectl invocations
• you use an identity provider like Google, Okta, or Keycloak for cluster access

When to avoid

• your cluster uses certificates, static tokens, or cloud IAM (e.g., aws-iam-authenticator) instead of OIDC
• you need server-side OIDC proxying rather than client credential plugins
• you are not using kubectl to access the cluster

Facets

cli-tool · maturity active

auth cli security developer-tools security cloud-computing cli cross-platform windows kubernetes kubectl-plugin oidc openid-connect client-go-credential-plugin authentication sso devops macos linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="int128/kubelogin")