Jeff McCune fd306aae76 Pod eso-creds-refresher authenticates to provisioner ...

This patch adds a ConfigMap and Pod to the eso-creds-refresher
component.  The Pod executes the gcloud container, impersonates the
eso-creds-refresher iam service account using workload identity, then
authenticates to the remote provisioner cluster.

This is the foundation for a script to automatically create Secret API
objects in a workload cluster which have a kubernetes service account
token ESO SecretStore resources can use to fetch secrets from the
provisioner cluster.

Once we have that script in place we can turn this Pod into a Job and
replace Vault.

2024-02-20 17:45:43 -08:00

..

provisioner/components

Refactor namespaces separate from eso-creds-refresher

2024-02-20 15:40:32 -08:00

workload/components

Pod eso-creds-refresher authenticates to provisioner

2024-02-20 17:45:43 -08:00