pinniped get kubeconfig
Because the command now calls the discovery endpoint, so it needs to go through the proxy to resolve the hostname.