Description
OIDC authentication for cluster access becomes available through a kubectl plugin. It helps users sign in with identity providers instead of managing long-lived static client certificates or tokens.
Authentication plugins handle login tokens and identity-provider sessions. Use trusted providers, protect browser and terminal sessions, and avoid copying tokens into logs.