All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Added lab cluster certificate
- URL encode spaces in scope in order for Mac OS Big Sur to recognize the authorization URL as a proper URL.
- Add
tbac
andemail
scope to token server authorization request, which will result in an ID token containing only claims (groups specifically) relevant to TBAC. This often cuts the returned token size in half or more. - Will now verify certificates for any known Bisnode cluster.
- kubectl-login will now exit after 10 minutes of idling. This in order to prevent the program from staying in the background if left unattended.
- Added a sleep in the main loop to avoid hogging the CPU while active.
- Token is now stored outside of
KUBECONFIG
to avoid it being sent when expired, as described in the kubernetes issue #87369.
- Fixed bug in
kubectl-login whoami
where team belonging would be blank in output. - Fixed bug in
kubectl-login whoami
that cut out parts of longer team names.
- First release!