Great guides !
Just to say that there is an error in clusterrolebinding-oidc-group-admin-kube-apiserver.yaml
subjects:
- kind: Group
name: admin-kube-apiserver
The group name should not contain oidc: before the group name but should only be admin-kube-apiserver.