bottlerocket-os / bottlerocket-os/bottlerocket
Allow to add additional credential-providers
- Dominant language
- Rust
- Stars
- 9.7k
- Forks
- 586
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 11
Description
**What I'd like:**
It looks like the [only supported credential-providers is ecr-credential-provider](https://bottlerocket.dev/en/os/1.20.x/api/settings/kubernetes/#credential-providers).
IIUC it would technically be possible to support additional credential-providers if we were able to deploy a credentials provider plugin in the image-credential-provider-bin-dir (/x86_64-bottlerocket-linux-gnu/sys-root/usr/libexec/kubernetes/kubelet/plugins?).
Then we would just have to declare it in `settings.kubernetes.credential-providers`.
**Any alternatives you've considered:**
We currently propagate an image pull secret and patch the pods using Kyverno policies instead.
Contributor guide
Assessment
This issue has not been assessed yet.