aws / aws/containers-roadmap

[EKS] [request]: Hide extension-apiserver-authentication from users

Open
#278 7 comments 3 reactions 0 assignees View on GitHub
EKS Proposed
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

**Tell us about your request**
To hide the config map resource `extension-apiserver-authentication` from the users.

**Which service(s) is this request for?**
EKS

**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**

We bumped into an issue with our EKS cluster trying to manage configmaps created in the cluster and deleted the cm resource `extension-apiserver-authentication` . This config map is created by the api server [Ref](https://github.com/kubernetes-incubator/apiserver-builder-alpha/blob/master/docs/concepts/auth.md#client-certificate-authentication) .

I had opened a case with the EKS team and the issue has been pending for over 4 days now and the issue might be resolved with restarting the api-server of the cluster.

However since we dont have access to do that, it would be very helpful to hide the configmap from the users.

Contributor guide

Open the contributing guide

Research direction

Start with the Kubernetes apiserver-builder authentication reference linked in the issue and investigate how EKS exposes the extension-apiserver-authentication ConfigMap. Done would mean defining and implementing a supported way to hide this control-plane resource from users without disrupting cluster authentication.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, kubernetes
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.