README
¶
garden-shoot-trust-configurator
Enable shoot clusters with Managed Service Account Issuer to be registered as trusted clusters in the Garden cluster. This reduces the need for manual service account token management and allows more secure, direct communication between shoots and the Garden cluster. This project is part of the Gardener ecosystem for managing Kubernetes clusters.
Development
As a prerequisite you need to have a Garden cluster up and running. Follow the Gardener's local setup guide which explains how to set up Gardener.
For local development, make sure to install oidc-webhook-authenticator, more details are outlined here.
Once the Garden cluster is up and running, set the KUBECONFIG environment variable to interact with the Garden cluster.
gardener_repo_path=$(pwd)/../gardener # change this if needed
export KUBECONFIG=$gardener_repo_path/dev-setup/kubeconfigs/virtual-garden/kubeconfig
Now start the garden-shoot-trust-configurator
make start
Feedback and Support
Feedback and contributions are always welcome!
Please report bugs or suggestions as GitHub issues or reach out on Slack (join the workspace here).
Learn more
Please find further resources about our project here:
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
garden-shoot-trust-configurator
command
|
|
|
internal
|
|
|
pkg
|
|
|
apis/config/v1alpha1
Package v1alpha1 contains the shoot trust confogurator configuration.
|
Package v1alpha1 contains the shoot trust confogurator configuration. |