<p>I have installed kubernetes with minikube in ubuntu 16.04. 
I want to know how i can integrate openid-connect based authentication with it. I am new to kubernetes. So any suggestion on how to configure would help.
I am currently accessing the dashboard with "minikube dashboard" command. But i dont seem to find any role specific login. The K8S guide has the below config section,</p>

<pre><code>    kubectl config set-credentials USER_NAME \
   --auth-provider=oidc \
   --auth-provider-arg=idp-issuer-url=( issuer url ) \
   --auth-provider-arg=client-id=( your client id ) \
   --auth-provider-arg=client-secret=( your client secret ) \
   --auth-provider-arg=refresh-token=( your refresh token ) \
   --auth-provider-arg=idp-certificate-authority=( path to your ca certificate ) \
   --auth-provider-arg=id-token=( your id_token ) \
   --auth-provider-arg=extra-scopes=( comma separated list of scopes to add to "openid email profile", optional )
</code></pre>

<p>Can someone tell me how i can get values for</p>

<p><strong>1. Issuer URL
 2. Refresh token
 3. Id-token
 4. Extra-scope</strong></p>

<p>I assume the <strong>client id</strong> and <strong>client secret</strong> are the ones we get when <strong>google credentials</strong> are created. Please correct me if I'm wrong.</p>

<p>The <a href="https://kubernetes.io/docs/admin/authentication/" rel="nofollow noreferrer">Kubernetes Authentication</a> docs try to explain the different "<code>authn</code>" plugins.  One of these is "OpenID Connect", which requires that you start up an "Identity Provider".</p>

<p>So when you tell <code>kubectl</code> to use <code>--auth-provider=oidc</code>, that's what you're using.  The <code>idp-issuer-url</code> will point at your Identity Provider's HTTPS URL.  They give different examples of implementations of this.  CoreOS has one called <a href="https://github.com/coreos/dex" rel="nofollow noreferrer">Dex</a>.</p>

<p>Their repo has some examples under: <code>./examples</code></p>

<p>An example of using <a href="https://github.com/SEJeff/k8s-ldap" rel="nofollow noreferrer">LDAP connector plugin for dex is here</a></p>

<p>For more information about how Authentication is done in Kubernetes (e.g.: "What is authn?" "What is authz", etc...), there is a <a href="https://youtu.be/i75ysFcvCkk" rel="nofollow noreferrer">great presentation by Eric Chiang here</a>.</p>

<p>So to answer your question:</p>

<h3>Q: how i can get values for:</h3>

<ol>
<li>Issuer URL</li>
<li>Refresh token</li>
<li>Id-token</li>
<li>Extra-scope</li>
</ol>

<h3>A: <a href="https://github.com/SEJeff/k8s-ldap" rel="nofollow noreferrer">Set up Dex</a>, then authenticate to it using the "Login" app (with some backend such as LDAP in example).  Then it redirects you to a page with a <code>~/.kube/config</code> file with a <code>user</code> which has all of these items.</h3>
