Skip to content

Add support for Platform IAM tokens#60

Merged
linki merged 3 commits intomasterfrom
platform-iam
Nov 7, 2025
Merged

Add support for Platform IAM tokens#60
linki merged 3 commits intomasterfrom
platform-iam

Conversation

@linki
Copy link
Copy Markdown
Collaborator

@linki linki commented Nov 6, 2025

This PR adds support for Platform IAM tokens in addition to the use of the in-cluster config.

It's disabled by default and can be enabled by setting the flag --use-platform-credentials. By default it uses the canonical credential location at /meta/credentials but the location can be customised by either setting the flag --credentials-dir or the environment variable CREDENTIALS_DIR.

The reason for this change is to allow egress-controller to connect to multiple clusters using the same credentials, which isn't possible with in-cluster service account tokens. This first PR enables the use of different credentials. In a follow-up PR there will be changes to support multiple clusters.

@linki linki changed the title Support Platform IAM tokens Add support for Platform IAM tokens Nov 7, 2025
@linki linki marked this pull request as ready for review November 7, 2025 11:02
@szuecs
Copy link
Copy Markdown
Owner

szuecs commented Nov 7, 2025

What about tests?

@szuecs
Copy link
Copy Markdown
Owner

szuecs commented Nov 7, 2025

👍

@linki linki merged commit 074bf80 into master Nov 7, 2025
2 checks passed
@linki
Copy link
Copy Markdown
Collaborator Author

linki commented Nov 7, 2025

What about tests?

I'll work on at unit tests in parallel. I'm probably not going to add tests for the functionality in main but let's see how it goes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants