a kubectl/client-go credentials plugin fetching OIDC access token for use with kube-apiserver - View it on GitHub