Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: add gardener shoot authentication #265

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

Avarei
Copy link

@Avarei Avarei commented Jun 3, 2024

Description of your changes

Fixes #244

Adds an Authentication Method to Gardener Shoot Clusters using shoot access
Implements a custom caching logic to reduce load on Api Server and reuse credentials while they are not expired.

I have:

  • Read and followed Crossplane's contribution process.
  • Run make reviewable test to ensure this PR is ready for review.

How has this code been tested

deployed to an environment with gardener running.

created ProviderConfig

apiVersion: kubernetes.crossplane.io/v1alpha1
kind: ProviderConfig
metadata:
  name: kubernetes-provider
spec:
  credentials:
    secretRef:
      key: kubeconfig
      name: gardener-config
      namespace: crossplane-system
    source: Secret
  identity:
    secretRef:
      key: shootRef
      name: exampleshoot
      namespace: crossplane-system
    source: Secret
    type: GardenerShootAdminCredentials
---
apiVersion: v1
kind: Secret
metadata:
  name: exampleshoot
  namespace: crossplane-system
stringData:
  shootRef: shoot-namespace/shoot-name

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add authentication method for Gardener Shoot Clusters
1 participant