Allow overriding secretKey for kubeadm kubeconfig

Signed-off-by: Andrei Kvapil <kvapss@gmail.com>
clastix · Feb 5, 2024 · 83ea282 · 83ea282
1 parent 6123d9a
commit 83ea282
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/internal/utilities/tenant_client.go b/internal/utilities/tenant_client.go
@@ -44,7 +44,13 @@ func GetTenantKubeconfig(ctx context.Context, client client.Client, tenantContro
 		return nil, err
 	}
 
-	return DecodeKubeconfig(*secretKubeconfig, kubeadmconstants.SuperAdminKubeConfigFileName)
+	secretKey := kubeadmconstants.SuperAdminKubeConfigFileName
+	v, ok := tenantControlPlane.GetAnnotations()["kamaji.clastix.io/kubeconfig-secret-key"]
+	if ok && v != "" {
+		secretKey = v
+	}
+
+	return DecodeKubeconfig(*secretKubeconfig, secretKey)
 }
 
 func GetRESTClientConfig(ctx context.Context, client client.Client, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) (*restclient.Config, error) {