storax/kubedoom

Custom authenticators (e.g. aws-iam-authenticator)

Liz4v opened this issue · 2 comments

Liz4v commented

Here's an exerpt of my ~/.kube/config

users:
- name: user1
  user:
    exec:
      apiVersion: client.authentication.k8s.io/v1alpha1
      args:
      - token
      - -i
      - cluster-name.example.com
      - --forward-session-name
      command: aws-iam-authenticator
      env: null

This will call a system command (in my case it's in /usr/local/bin/aws-iam-authenticator) to use my existing AWS credentials to authenticate me into kubernetes.

What is the recommended way to provide this authenticator into kubedoom?

storax commented

I guess you would have to build your own image to include the authenticator. You should be able to use the kubedoom image as a base. It's a Ubuntu image. I don't think anything else would be required.

EliseAv commented

Ok thanks. I'll have a go at it and open a documentation PR in the future.

  • 👍1