kubelogin (Azure)

kubelogin is a [client-go credential (exec) plugin](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins) implementing azure authentication. This plugin provides features that are not available in kubectl. It is supported on kubectl v1.11+

## Features:

- `convert-kubeconfig` command to converts kubeconfig with existing azure auth provider format to exec credential plugin format

- device code login

- non-interactive service principal login

- non-interactive user principal login using Resoure owner login flow

- non-interactive managed service identity login

- non-interactive Azure CLI token login (AKS only)

- non-interactive workload identity login

- AAD token will be cached locally for renewal in device code login and user principal login (ropc) flow. By default, it is saved in `~/.kube/cache/kubelogin/`

- addresses kubernetes/kubernetes#86410 to remove `spn:` prefix in `audience` claim, if necessary. (based on kubeconfig or commandline argument `--legacy`)

- Setup for Kubernetes OIDC Provider using Azure AD.