kubernetes

Get OIDC kubeconfig

Returns a kubeconfig for the cluster whose user authenticates via the kubelogin (kubectl oidc-login) exec credential plugin, using the cluster's configured OIDC issuer identified by the name path parameter. The plugin (kubelogin) must be installed on the client. No long-lived credential is embedded. The OIDC client secret and any provider-specific kubelogin flags are not injected by the server; the returned kubeconfig includes comments describing how to add them.

get/1.3/kubernetes/{uuid}/authentication/{name}/kubeconfig

Request

  • Base URL: https://api.upcloud.com
  • URL: https://api.upcloud.com/1.3/kubernetes/{uuid}/authentication/{name}/kubeconfig
  • Auth: HTTP bearer

Path parameters

uuidstring uuid required

UUID

namestring required

Name

Query parameters

audiencestring

Which of the issuer's configured audiences to use as the OIDC client id in the generated kubeconfig. When omitted, the issuer's first audience is used. Must match one of the issuer's audiences.

Response

200 getClusterKubeconfig response

kubeconfigstring required

Kubeconfig

Changes

No recorded changes to this operation across all 1 revision of this API.