Symptom:
We add a new oidc parameter for kube-apiserver to integrate with openID Dex.
The parameter is --oidc-groups-prefix=oidc:
After that, kubelet can't start kube-apiserver static pod, and no obvious error reported
Solution:
The issue is to ":" which is special character. It prevents kubelet to parse the parameter.
The right way is to quote it. "--oidc-groups-prefix=oidc:" See more details in this github thread