Skip to content

feat: add gardener shoot authentication#265

Draft
avarei wants to merge 1 commit intocrossplane-contrib:mainfrom
avarei:feat/gardener-auth
Draft

feat: add gardener shoot authentication#265
avarei wants to merge 1 commit intocrossplane-contrib:mainfrom
avarei:feat/gardener-auth

Conversation

@avarei
Copy link
Copy Markdown

@avarei avarei commented Jun 3, 2024

Description of your changes

Fixes #244

Adds an Authentication Method to Gardener Shoot Clusters using shoot access
Implements a custom caching logic to reduce load on Api Server and reuse credentials while they are not expired.

I have:

  • Read and followed Crossplane's contribution process.
  • Run make reviewable test to ensure this PR is ready for review.

How has this code been tested

deployed to an environment with gardener running.

created ProviderConfig

apiVersion: kubernetes.crossplane.io/v1alpha1
kind: ProviderConfig
metadata:
  name: kubernetes-provider
spec:
  credentials:
    secretRef:
      key: kubeconfig
      name: gardener-config
      namespace: crossplane-system
    source: Secret
  identity:
    secretRef:
      key: shootRef
      name: exampleshoot
      namespace: crossplane-system
    source: Secret
    type: GardenerShootAdminCredentials
---
apiVersion: v1
kind: Secret
metadata:
  name: exampleshoot
  namespace: crossplane-system
stringData:
  shootRef: shoot-namespace/shoot-name

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add authentication method for Gardener Shoot Clusters

1 participant