k3s/pkg/credentialprovider/gcp
Matt Moore d5e0054eb0 Enable usage of a "json key" for authenticating with gcr.io.
With this change, you can add --google_json_key=/path/to/key.json to the DAEMON_ARGS of the kubelet, e.g.
   nano /etc/default/kubelet
   ... # Add the flag
   service kubelet restart

With this setting, minions will be able to authenticate with gcr.io repositories nearly as smoothly as if K8s were running on GCE.

NOTE: This private key can be used to access most project resources, consider dropping the service account created through this flow to a project READER, or restricting its access to just the GCS bucket containing the container images.
2015-03-15 09:24:33 -07:00
..
doc.go Implements a credentialprovider library for use by DockerPuller. 2014-11-17 21:46:54 -08:00
jwt.go Enable usage of a "json key" for authenticating with gcr.io. 2015-03-15 09:24:33 -07:00
jwt_test.go Enable usage of a "json key" for authenticating with gcr.io. 2015-03-15 09:24:33 -07:00
metadata.go Merge pull request #2674 from mattmoor/quiet-credentialprovider 2014-12-02 18:25:03 -08:00
metadata_test.go Clean up error logs. 2014-11-21 09:45:26 +08:00