[GEP-26] Support workload identity tokens for cloud provider CLIs #406
Labels
component/gardenctl
Gardener CLI
kind/enhancement
Enhancement, improvement, extension
lifecycle/stale
Nobody worked on this for 6 months (will further age)
Comments
petersutter
added
component/gardenctl
gardener-robot
added
the
lifecycle/stale
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
What would you like to be added:
With GEP-26, a new
WorkloadIdentityresource is introduced. This resource is comparable toServiceAccounts, for which tokens can be requested by creating asecurity.gardener.cloud/v1alpha1.TokenRequest. This is similar to theTokenRequestAPI for service accounts.It should be possible to request such tokens via gardenctl to configure the cloud provider CLIs. This is similar to how it is currently done with the
provider-envcommand, which uses the static cloud infrastructure credentials stored as secrets in the garden cluster.Why is this needed:
The text was updated successfully, but these errors were encountered: