Identity
Provider
Kubectl
User
1
.
Login
to
IdP
2
.
Provide
access_token
,
id_token
and
refresh_token
API
Server
3
.
Call
kubectl
with
--
token
being
the
id_token
OR
add
tokens
to
.
kubectl
/
config
4
.
Authorization
:
Bearer
...
8
.
Authorized
:
perform
action
and
return
result
9
.
Return
result
6
.
Has
the
JWT
expired
?
(
iat
+
exp
)
7
.
User
Authorized
?
5
.
Is
JWT
signature
valid
?