Klavs Klavsen

This diagram seems to indicate kubelogin already does this https://github.com/int128/kubelogin/pull/144/files - ONLY issue is that kubelogin MUST then run inside kubernetes - for it to have a secure way to...

I would much prefer having the secret in 1 place only - inside the kubernetes cluster (as a secret in a namespace) - instead of having it available to everyone...

or is the client secret being revealed not a problem - if the redirect url is just set to a specific url ? and what should that be for Google...

No progress on this? :(

``` $ ykman --diagnose ykman: 4.0.8 Python: 3.9.7 (default, Sep 10 2021, 14:59:43) [GCC 11.2.0] Platform: linux Arch: x86_64 Running as admin: False Detected PC/SC readers: Detected YubiKeys over PC/SC:...

My key is directly inserted in my thinkpad laptop

That solved it for me too. Thank you @untbu

I have the same problem on Ubuntu 21.10 with yubikey-manager installed from OS repos. ubuntu version: 4.0.0~a1-4 I tried dl'ing the yubikey-manager gui - but does not seem to support...

I upgraded ykman with : pip install -U yubikey-manager (as root) and I still get the same error with v4.0.8 installed.

I was able to make it work by entering: ykman config mode ccid and re-inserting yubikey (tip from other issue here)