No documentation for Kubernetes credential manager

[rubenv]

Just found out that there's a Kubernetes creds plugin, which is completely undocumented. Might help to add a bit about this.

[michaelmeelis]

I'm using this as well and it really confuses me in certain times. I would love some examples with the docker repositories or some more details how it is fetched.

[cirocosta]

Hi @rubenv and @michaelmeelis ,

That is indeed something that is missing, thanks for raising that!

For the moment, you can refer to https://github.com/helm/charts/blob/master/stable/concourse/README.md#kubernetes-secrets for an example of how to make use of secrets as the credential manager for your pipelines.

We're currently improving how users experience Concourse on top of k8s (e.g., integration tests running on top of k8s regarding this feature was being added just yesterday), so we should have that added to the docs soon with some examples.

Meanwhile, do you have any specific details that you'd like to know there?

Thanks!!

[rubenv]

Was able to figure it out from that one. It was just slightly annoying to roll out Vault on our test cluster only to then find out that there's a simpler solution based on Kubernetes.

A simple note in the Concourse docs that a Kubernetes-secrets-based option is available would've saved a ton of time.

[cirocosta]

Issue Status

In progress.

---

Summary

We're still going through the task list, getting the documentation set up for someone who's not using the Helm chart so that we have the baseline regardless of how the packaging was performed.

Documentation specific for the Chart already lives under stable/concourse.

The on-going document can be found here: https://github.com/concourse/docs/tree/issue/96.

---

Task List

• How it works
  • How secrets lookups are performed
• Configuration
  • web-node environment variables set up
  • Access
    • From within the cluster
    • From outside the cluster
• Interpolation gotchas
• Examples
  • kubernetes objects needed

---