Obtain a token from the web landing page.
Click the “Generate kubectl Token” button.
Select an identity provider and cluster.
As many of the backends provide single-sign on (SSO), you may already be signed in. Otherwise, you will be redirected to your identity provider’s web page to login. Once you have signed in, a page will show the commands required to configure
kubectlto access the Konvoy cluster.
When the token expires, it is necessary to repeat the above process to obtain a fresh token. When refreshing a token, only the
kubectl config set-credentialscommand needs to be executed with the new token.