A great tutorial, which became awesome due to the Schwarzenegger accent. :D

Thanks  for this tutorial. 👍 But what about managed Kubernetes Clusters where it may not be allowed to set API-Server flags. How could that work?

what is the api-server configuration for this oidc ? what are the claims you have used?

With this solution, you have to share the 'client secret' with every Kubernetes user. That is not very secure, though.