From 2f6e9dcba824d3392b1959738a3331a9ba3b02e6 Mon Sep 17 00:00:00 2001
From: Masaki Yatsu <yatsu@yatsu.info>
Date: Sun, 23 Nov 2025 14:58:26 +0900
Subject: [PATCH] fix: remove oidc-login cache

---
 k8s/justfile | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/k8s/justfile b/k8s/justfile
index 3585223..c88e58c 100644
--- a/k8s/justfile
+++ b/k8s/justfile
@@ -164,7 +164,18 @@ restart:
 
 # Setup k8s OIDC authentication
 setup-oidc-auth:
+    #!/bin/bash
+    set -euo pipefail
     just env::check
+
+    # Clear OIDC token cache if it exists
+    if [ -d ~/.kube/cache/oidc-login ]; then
+        if gum confirm "Clear OIDC token cache? (Recommended after Keycloak reinstall)"; then
+            rm -rf ~/.kube/cache/oidc-login/
+            echo "OIDC token cache cleared."
+        fi
+    fi
+
     gomplate -f ./k3s/config.gomplate.yaml | \
         ssh ${LOCAL_K8S_HOST} "sudo tee /etc/rancher/k3s/config.yaml > /dev/null"
     ssh ${LOCAL_K8S_HOST} "sudo systemctl restart k3s"