awslabs / awslabs/amazon-eks-ami

Add support for CredentialProviderConfig as part of NodeConfig.kubelet.config

Open
#2,467 3 comments 1 reaction 0 assignees View on GitHub
Dominant language
Go
Stars
2.7k
Forks
1.2k
Avg merge
2d 46m
Merged PRs (30d)
18

Description

**What would you like to be added**:
I want to be able to override the default CredentialProviderConfig settings through NodeConfig. Right now, if you include the configuration in the kubelet config section, it gets written to /etc/kubernetes/kubelet/config.json.d/40-nodeadm.conf. The settings are superseeded by the values in the environment file, /etc/eks/kubelet/environment.

**Why is this needed**:
I want to be able to configure the kubelet to send the service account token bound to the pod for which the image is being pulled to the credential provider plugin. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-credential-provider/. I want to be able to do this using eksctl's overrideBootstrapCommand which accepts a nodeConfig.

Contributor guide

Open the contributing guide

Research direction

Trace how NodeConfig.kubelet.config is written to /etc/kubernetes/kubelet/config.json.d/40-nodeadm.conf and how /etc/eks/kubelet/environment takes precedence. Verify the credential provider settings can be overridden through eksctl's overrideBootstrapCommand and confirm the resulting kubelet configuration passes the requested service account token setting to the plugin.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.