Kubernetes API-Server with Multiple IdPs (and Github Actions)

In my article on Authentik, I mentioned the possibility of having SSO on the Kubernetes API-Server. As a reminder, to enable OIDC authentication when using kubectl, you first need to configure the Kubernetes API so it can accept JWT tokens issued by a compatible OIDC identity provider (IdP). This is done by adding parameters to the Kubernetes API server command line: cluster: apiServer: extraArgs:…