Pinniped flow: first kubectl command through to the API server

Scroll or pinch to zoom, drag to move, double-click to zoom in 100% SVG PNG Back to the post

Pinniped flow in six steps: the developer runs kubectl, the Pinniped CLI opens a browser login at the Supervisor, the Supervisor federates the login to the identity provider, the CLI exchanges the Supervisor token for a cluster credential at the Concierge, the Concierge checks the token against the Supervisor issuer, and the authenticated request reaches the Kubernetes API server, where RBAC applies.