New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

how is the GCP service key used? #38

Closed
nhooyr opened this Issue Feb 7, 2019 · 4 comments

Comments

Projects
None yet
2 participants
@nhooyr
Copy link

nhooyr commented Feb 7, 2019

This is a question.

I noticed that the service key provided as a value to the chart is put into /etc/service_key.

From here, is it automatically used bykubectl, helm and gcloud?

@rimusz

This comment has been minimized.

Copy link
Collaborator

rimusz commented Feb 8, 2019

GCP service account is needed if you want to access private GCR registry

@nhooyr

This comment has been minimized.

Copy link
Author

nhooyr commented Feb 8, 2019

Yes I understand that but how is passed to kubctl, helm et all? Like in the code. How does kubectl know the key is in /etc/service_key?

@rimusz

This comment has been minimized.

Copy link
Collaborator

rimusz commented Feb 8, 2019

the service account file (which can push to registry, deploy to kubernetes and etc) gcr_service_account.key gets amounted to: /etc/service_key folder.
The in your Buildkite pipeline you can use it as:

export GOOGLE_APPLICATION_CREDENTIALS=/etc/service_key/gcr_service_account.key

then kubectl, gcloud and will work for you.

@nhooyr

This comment has been minimized.

Copy link
Author

nhooyr commented Feb 8, 2019

Awesome, thanks for clarifying.

@nhooyr nhooyr closed this Feb 8, 2019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment