Josef LehnerPractical field notes from nearly 20 years in IT, from software development and performance engineering to observability, FinOps, cloud optimization, automation, and cloud-native technology.https://joseflehner.com/enHow a Missing Audience Claim Taught Me More About OIDC Than Any Tutorialhttps://joseflehner.com/blog/kubecost-keycloak-oidc/https://joseflehner.com/blog/kubecost-keycloak-oidc/Fix Kubecost OIDC login loop with Keycloak: missing audience claim, redirect_uri errors, scope=openid missing, and token introspection returning active: false. Step-by-step troubleshooting for integrating Kubecost with Keycloak on OpenShift.Fri, 16 Oct 2026 00:00:00 GMTKubecostKeycloakOAuth 2.0OIDCOpenID ConnectOpenShift