Kubernetes Dashboard Unauthorized with Keycloack/Dex
This turns out to be a case of me not reading the documentation. I missed the section where I had to add these to the kube-api server.
--oidc-issuer-url=https://dex.k8s.example.com/dex: External Dex endpoint--oidc-client-id=loginapp: ID for our Login Application--oidc-username-claim=name: Map to nameAttr Dex configuration. This will be used by Kubernetes RBAC to authorize users based on their name.--oidc-groups-claim=groups: This will be used by Kubernetes RBAC to authorize users based on their groups.