hashicorp / hashicorp/boundary

Kubernetes Target support

Open
#684 18 comments 61 reactions 3 assignees Claimed by @AdamBouhmad View on GitHub
enhancement
Dominant language
Go
Stars
4.1k
Forks
317
Avg merge
5h 10m
Merged PRs (30d)
1

Description

**Is your feature request related to a problem? Please describe.**
> Boundary provides an easy-to-use, platform-agnostic way to access all of your hosts and services across clouds, Kubernetes clusters, and on-premises datacenters through a single workflow based on trusted identity. It lets you remove hard-coded credentials and firewall rules, and makes access control more dynamic.
~ https://www.hashicorp.com/blog/hashicorp-boundary

As per the above announcement, Kubernetes clusters as targets is either an existing or planned feature. Is there any guidance on how to use Boundary today for Kubernetes use-cases? If not, happy to contribute it as a target.

**Describe the solution you'd like**
I would like to login to any Kubernetes cluster that exists in a given Boundary project using an expiring service account for a limited amount of time with specified RBAC permissions to my user. I expect a new Kubernetes context to be added to either `export KUBECONFIG=` or to my `~/.kube/config` file.

**Describe alternatives you've considered**
Should I write my own target plugin?

**Explain any additional use-cases**
Apart from temporary access to a k8s cluster, it would be interesting to have the ability to request different RBAC permissions. For example, maybe I just want read-only access, and I can escalate my access on a need basis.

**Additional context**
Existing solutions focused on Kubernetes:
- [kconnect](https://github.com/fidelity/kconnect)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.