CLI & Kubeconfig Access

apiVersion: v1
kind: Config
preferences: {}
clusters:
- cluster:
    certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCg==...
    server: https://api.berkelium.lbl.gov:6443
  name: berkelium-cluster

contexts:
- context:
    cluster: berkelium-cluster
    namespace: sci-als-diffraction
    user: lbnl-sso-user
  name: berkelium-sci-als-diffraction

current-context: berkelium-sci-als-diffraction

users:
- name: lbnl-sso-user
  user:
    exec:
      apiVersion: client.authentication.k8s.io/v1beta1
      command: kubectl
      args:
      - oidc-login
      - get-token
      - --oidc-issuer-url=https://auth.lbl.gov/auth/realms/lbnl
      - --oidc-client-id=berkelium-k8s
      - --oidc-extra-scope=email,profile,groups

# 1. Save kubeconfig to your environment
mkdir -p ~/.kube
mv ~/Downloads/berkelium-sci-als-diffraction-config.yaml ~/.kube/config

# 2. Verify cluster context & active namespace
kubectl config current-context

# 3. Test access & authenticate with LBNL OneID
kubectl get pods -n sci-als-diffraction

# 4. View active resource quota limits
kubectl get resourcequota -n sci-als-diffraction