Use Dex to set up single sign on for Kubernetes CLI clients like kubectl: Single Sign-On for Kubernetes: The Command Line Experience.