Federated Authentication to CoreWeave Kubernetes with an External OIDC Provider

How to configure CoreWeave Kubernetes Service for external OIDC authentication, then use kubelogin so kubectl users can sign in through Google OAuth or another identity provider.