upstream/kubernetes
1
0
Fork 0
mirror of https://github.com/kubernetes/kubernetes.git synced 2026-06-24 00:40:16 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
kubernetes/test/e2e_node/plugins/gcp-credential-provider
History
Patrick Ohly 6ba4d21765 e2e_node: multiplex different commands in e2e_node.test 
The additional commands (mounter, gcp-credentials-provider) are needed for E2E
node testing. This change makes e2e_node.test entirely self-contained.

Copying the commands' code into separate packages is temporary and only done to
avoid touching them while it is still unclear whether this approach will work
out.

Besides avoiding changes to the build rules, bundling the functionality also has a
slight size advantage: the size of e2e_node.test increases by 10KB, whereas
the other two separate commands would add 10MB.
2026-06-03 08:34:56 +02:00
..
pkg e2e_node: multiplex different commands in e2e_node.test 2026-06-03 08:34:56 +02:00
main.go add e2e test with the gcp-credential-provider test plugin 2025-03-11 20:36:36 -07:00
main_test.go Update test to validate against v1 kubelet APIs 2022-10-03 17:57:25 +00:00
provider.go Replace the deprecated ioutil methods in the test directory 2023-04-18 21:51:10 +08:00
README.md remove GAed KubeletCredentialProviders 2023-03-31 10:09:58 +08:00

README.md

GCP credential provider for e2e testing

This package contains a barebones implementation of the kubelet GCP credential provider for testing purposes only. This plugin SHOULD NOT be used in production.

This credential provider is installed and configured in the node e2e tests by:

  1. Building the gcp-credential-provider binary and including it in the test archive uploaded to the GCE remote node.

  2. Writing the credential provider config into the temporary workspace consumed by the kubelet. The contents of the config should be something like this:

kind: CredentialProviderConfig
apiVersion: kubelet.config.k8s.io/v1alpha1
providers:
  - name: gcp-credential-provider
    apiVersion: credentialprovider.kubelet.k8s.io/v1alpha1
    matchImages:
    - "gcr.io"
    - "*.gcr.io"
    - "container.cloud.google.com"
    - "*.pkg.dev"
    defaultCacheDuration: 1m`
  1. Configuring the following additional flags on the kubelet:
--feature-gates=DisableKubeletCloudCredentialProviders=true
--image-credential-provider-config=/tmp/node-e2e-123456/credential-provider.yaml
--image-credential-provider-bin-dir=/tmp/node-e2e-12345