1. 1. Introduction
  2. 2. Installation
  3. 3. Quick Start
  4. 4. Concepts
    1. 4.1. Exec Plugin
    2. 4.2. Login Modes
      1. 4.2.1. Device Code
      2. 4.2.2. Azure CLI
      3. 4.2.3. Azure Developer CLI
      4. 4.2.4. Web Browser Interactive
      5. 4.2.5. Service Principal
      6. 4.2.6. Managed Service Identity
      7. 4.2.7. Workload Identity
      8. 4.2.8. Resource Owner Password Credential
    3. 4.3. Using kubelogin with AKS
    4. 4.4. Using kubelogin to get Proof-of-Possession (PoP) tokens for Azure Arc
  5. 5. Command-Line Tool
    1. 5.1. convert-kubeconfig
    2. 5.2. get-token
    3. 5.3. remove-cache-dir
  6. 6. Topics
    1. 6.1. Using in different environments
    2. 6.2. Using Service Principal
    3. 6.3. Setup k8s OIDC Provider using Azure AD
    4. 6.4. Using kubelogin in Jenkins
  7. 7. Known Issues
  8. 8. Development
    1. 8.1. Releasing
  9. 9. Contributing
  10. 10. Code of Conduct

Azure Kubelogin

Introduction

kubelogin is a client-go credential (exec) plugin implementing azure authentication. This plugin provides features that are not available in kubectl. It is supported on kubectl v1.11+

Features

  • interactive device code login
  • interactive web browser login
  • non-interactive service principal login
  • non-interactive user principal login using Resource owner login flow
  • non-interactive managed service identity login
  • non-interactive Azure CLI token login (AKS only)
  • non-interactive Azure Developer CLI token login (AKS only)
  • non-interactive workload identity login