k3s/pkg/credentialprovider
Matt Moore d5e0054eb0 Enable usage of a "json key" for authenticating with gcr.io.
With this change, you can add --google_json_key=/path/to/key.json to the DAEMON_ARGS of the kubelet, e.g.
   nano /etc/default/kubelet
   ... # Add the flag
   service kubelet restart

With this setting, minions will be able to authenticate with gcr.io repositories nearly as smoothly as if K8s were running on GCE.

NOTE: This private key can be used to access most project resources, consider dropping the service account created through this flow to a project READER, or restricting its access to just the GCS bucket containing the container images.
2015-03-15 09:24:33 -07:00
..
gcp Enable usage of a "json key" for authenticating with gcr.io. 2015-03-15 09:24:33 -07:00
config.go Check other dirs for .dockercfg 2015-01-27 15:54:20 -08:00
config_test.go Implements a credentialprovider library for use by DockerPuller. 2014-11-17 21:46:54 -08:00
doc.go Implements a credentialprovider library for use by DockerPuller. 2014-11-17 21:46:54 -08:00
keyring.go Add a more detailed error message for potential auth fails in docker pull. 2015-02-12 17:00:59 -08:00
keyring_test.go Implements a credentialprovider library for use by DockerPuller. 2014-11-17 21:46:54 -08:00
plugins.go Implements a credentialprovider library for use by DockerPuller. 2014-11-17 21:46:54 -08:00
provider.go Check other dirs for .dockercfg 2015-01-27 15:54:20 -08:00
provider_test.go Implements a credentialprovider library for use by DockerPuller. 2014-11-17 21:46:54 -08:00