unauthorized on kubernetes dashboard with google provider (invalid bearer token, Token has been invalidated) about oauth2-proxy HOT 3 CLOSED

Could you add the --set-authorization-header=true flag to your deployment and then visit https://$HOST/oauth2/auth and read the Authorization header from the response? In the response should be the ID token that the OAuth2 Proxy is receiving from Google.

You can use jwt.io to decode this and take a look at the payload, double check your OIDC flags match the values in the payload.

from oauth2-proxy.

Looks like kube-apiserver can't verify "web application" type token from Google, which is only can be used with oauth_proxy.
kubectl auth works fine with "Other" type, but with this type proxy can`t specify callback URL.

We will try your Dex branch as a Google IDP proxy.

from oauth2-proxy.

This issue has been inactive for 60 days. If the issue is still relevant please comment to re-activate the issue. If no action is taken within 7 days, the issue will be marked closed.

from oauth2-proxy.