<p>I have a question about giving access to k8s cluster. For example, new member joined our team. He created certificatesigningrequest and I approved it. Then created kubeconfig and give it to him to access our cluster. One day if he leave our team how can remove his access? I want he can not access to our cluster with this kubeconfig.</p>

muradheydarov
<p>Imho you should use an external authentication provider. You can take a look at <a href="https://dexidp.io/docs/kubernetes/" rel="nofollow noreferrer">https://dexidp.io/docs/kubernetes/</a> which is an abstraction layer to other IDaaS-Providers like Azure, Google, Github and many more. For example, if your company uses Active Directory, you can control the access to the cluster using group memberships, where withdrawing access is then part of the company-wide leaver process.</p>
