[EKS] [request]: Hide extension-apiserver-authentication from users
- Dominant language
- Shell
- Stars
- 5.4k
- Forks
- 334
- PR merge metrics
- No merged PRs in 30d
Description
**Tell us about your request**
To hide the config map resource `extension-apiserver-authentication` from the users.
**Which service(s) is this request for?**
EKS
**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
We bumped into an issue with our EKS cluster trying to manage configmaps created in the cluster and deleted the cm resource `extension-apiserver-authentication` . This config map is created by the api server [Ref](https://github.com/kubernetes-incubator/apiserver-builder-alpha/blob/master/docs/concepts/auth.md#client-certificate-authentication) .
I had opened a case with the EKS team and the issue has been pending for over 4 days now and the issue might be resolved with restarting the api-server of the cluster.
However since we dont have access to do that, it would be very helpful to hide the configmap from the users.
Contributor guide
Research direction
Start with the Kubernetes apiserver-builder authentication reference linked in the issue and investigate how EKS exposes the extension-apiserver-authentication ConfigMap. Done would mean defining and implementing a supported way to hide this control-plane resource from users without disrupting cluster authentication.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, kubernetes
- Domain
- cloud, infrastructure
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100