mirror of
https://github.com/holos-run/holos.git
synced 2026-03-22 02:05:00 +00:00
0771bd6b6c
The provisioner cluster is a worker-less autopilot cluster that provides secrets to other clusters in the platform. The `eso-creds-refresher` Job in the holos-system namespace of each other cluster refreshes service account tokens for SecretStores. This patch adds the IAM structure for the Job implemented by Namespace, ServiceAccount, Role, and RoleBinding api objects.
19 lines
346 B
Bash
Executable File
19 lines
346 B
Bash
Executable File
#! /bin/bash
|
|
#
|
|
set -xeuo pipefail
|
|
|
|
cd "$HOME"
|
|
|
|
gcloud config set disable_usage_reporting true
|
|
gcloud auth login --cred-file $GOOGLE_APPLICATION_CREDENTIALS
|
|
|
|
export KUBECONFIG="${HOME}/kubeconfig.seed"
|
|
|
|
# Log into k8s.
|
|
gcloud container clusters get-credentials holos --region=us-central1
|
|
|
|
# Check access.
|
|
kubectl version --output=yaml
|
|
|
|
sleep 3600
|