kyma-project / kyma-project/cli
Pre-vallidate OIDC provider before generating kubeconfig with interactive login
Open
@halamix2 is already working on this.
Since Dec 16, 2025.
kind/enhancement
- Dominant language
- Go
- Stars
- 125
- Forks
- 124
- PR merge metrics
- No merged PRs in 30d
Description
Description
When generating kubeconfig for oidc,
kyma alpha kubeconfig generate --oidc-name
Before producing a kubeconfig with interactive login, check if the issuer is supporting it.
We could inspect the ${ISSUER_URL}.well-known/openid-configuration endpoint to check if the authorization_endpoint is present in the response. If, not, return with error, as such issuer is headless-only, suitable for ci/cd pipelines only and interactive login via browser is not possible.
Reasons
With CLI user should be able to avoid misconfigurations
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.