Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
23 commits
Select commit Hold shift + click to select a range
d4f5443
feat(ske): support stateless WIF kubeconfig login
Galin-Karabadzhakov Jul 15, 2026
b483121
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Jul 20, 2026
8dea116
Merge remote-tracking branch 'origin/main' into feat/support-wif-ske-…
Galin-Karabadzhakov Jul 22, 2026
971d995
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Jul 30, 2026
c963011
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 4, 2026
e98a479
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 12, 2026
1d33eab
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 18, 2026
a4feb08
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 20, 2026
b188de2
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 20, 2026
b91442f
fix(ske): address stateless login review feedback
Galin-Karabadzhakov Aug 21, 2026
1cb1cf2
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 21, 2026
71e0173
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 25, 2026
ee80445
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 26, 2026
1743472
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 27, 2026
b28413c
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 28, 2026
cf96e14
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 28, 2026
9ef98c3
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 31, 2026
a27507c
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Aug 31, 2026
0aa5f4f
Merge branch 'main' into feat/support-wif-ske-exec
Galin-Karabadzhakov Sep 2, 2026
445e7b2
Update internal/cmd/ske/kubeconfig/login/login.go
Galin-Karabadzhakov Sep 3, 2026
309e0e8
fix(ske): prefer explicit login configuration
Galin-Karabadzhakov Sep 3, 2026
0cce847
fix(ske): use shared OIDC token adapters
Galin-Karabadzhakov Sep 3, 2026
3de94aa
fix(ske): refine cluster config precedence
Galin-Karabadzhakov Sep 4, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 16 additions & 2 deletions docs/stackit_ske_kubeconfig_login.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,15 @@ Login plugin for kubernetes clients, that creates short-lived credentials to aut
First you need to obtain a kubeconfig for use with the login command (first or second example).
Secondly you use the kubeconfig with your chosen Kubernetes client (third example), the client will automatically retrieve the credentials via the STACKIT CLI.

Project ID and region are resolved with the following precedence:

| Explicit flag | Global config | Exec cluster config | Result |
| --- | --- | --- | --- |
| Not set | Set | Not set | Global config |
| Set | Set | Not set | Explicit flag |
| Not set | Set | Set | Exec cluster config |
| Set | Set | Set | Explicit flag |

```
stackit ske kubeconfig login [flags]
```
Expand All @@ -24,13 +33,18 @@ stackit ske kubeconfig login [flags]
Use the previously saved kubeconfig to authenticate to the SKE cluster, in this case with kubectl.
$ kubectl cluster-info
$ kubectl get pods

Configure an IdP exec provider for a Kubernetes client that does not provide cluster information. In an SKE workload, the CLI automatically uses the projected workload identity token.
$ stackit ske kubeconfig login --idp --cluster-name my-cluster --organization-id my-organization-id --project-id my-project-id --region eu01
```

### Options

```
-h, --help Help for "stackit ske kubeconfig login"
--idp Use the STACKIT IdP for authentication to the cluster.
--cluster-name string SKE cluster name. Used when the Kubernetes exec request does not provide cluster information.
-h, --help Help for "stackit ske kubeconfig login"
--idp Use the STACKIT IdP for authentication to the cluster.
--organization-id string Organization ID. Used in IdP mode when the Kubernetes exec request does not provide cluster information.
```

### Options inherited from parent commands
Expand Down
Loading
Loading