Skip to content
This repository was archived by the owner on May 10, 2019. It is now read-only.

Allow a way to template the username in the rendered config #44

Open
SEJeff opened this issue Jul 10, 2018 · 1 comment
Open

Allow a way to template the username in the rendered config #44

SEJeff opened this issue Jul 10, 2018 · 1 comment

Comments

@SEJeff
Copy link

SEJeff commented Jul 10, 2018

We currently are happy kuberos users in two on-premise k8s clusters, dev.k8s, and prod1.k8s. Both tie into dex which hits our corporate Active Directory. When kuberos renders the username in a kubecfg.yaml, it uses the mail attribute of the user from AD as the name. When a user downloads config files from both the dev and prod1 cluster, the username is the same but the credentials are different. This causes authentication to fail to one of the two clusters.

This RFE is asking for a way to template the username in the config instead of:

users:
- name: [email protected]
  user:
    auth-provider:
    ...

Perhaps the username@domain bit could have a prefix or suffix to denote something? Then the rendered config could have something more like this in 1 cluster, and the existing functionality in another cluster:

users:
- name: [email protected]
  user:
    auth-provider:
    ...

We simply set the KUBECONFIG variable to include both files such as: /home/jschroeder/.kube/config:/home/jschroeder/.kube/prod.k8s.yaml:/home/jschroeder/.kube/dev.k8s.yaml

@SEJeff
Copy link
Author

SEJeff commented Jul 13, 2018

Appears to be fixed by #43

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant