InseeFrLab / InseeFrLab/onyxia

Add a way to provide a certificate authority for kubectl configuration

Open
#756 5 comments 0 reactions 1 assignee Claimed by @garronej View on GitHub
Dominant language
TypeScript
Stars
872
Forks
109
Avg merge
6d 3h
Merged PRs (30d)
1

Description

When configuring the external api server for kubernetes in onyxia, the configuration script uses the flag ` --insecure-skip-tls-verify=true` :

```
kubectl config set-cluster api \
--server=https://api \
--insecure-skip-tls-verify=true

```

We would like to be able to provide a certificate in onyxia configuration so that this flag is not needed. For instance:

```
"k8sPublicEndpoint":
{
"URL": "https://api.kube.groupe-genes.fr",
"certificateAuthority": "LS0tLS1CRUdJTiBDRVJUS...",
"oidcConfiguration":
{
"issuerURI": "https://auth.groupe-genes.fr/realms/genes",
"clientID": "onyxia",
},
},
```

would gives :
```
kubectl config set-cluster api \
--server=https://api \
--certificate-authority=LS0tLS1CRUdJTiBDRVJUS...
```

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.