kube-apiserver-arg:
  - "oidc-issuer-url=https://keycloak.wagshome.org/realms/master"
  - "oidc-client-id=kube-apiserver"
  - "oidc-username-claim=email"
  - "oidc-groups-claim=groups"