We're wiring together three components: OpenLDAP (your user directory), Dex (the authentication translator), and the Kubernetes API Server (the skeptical consumer of identity tokens). Every bug, every misconfiguration, and every "why is this not working" moment is documented here because I hit all of them personally.
https://medium.com/@jinalpatel11121999/kubernetes-authn-the-hard-way-cb191ec69dae