Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

support Docker Host Certificate Authentication type #520

Merged
merged 1 commit into from
Jul 2, 2019

Conversation

haoshuwei
Copy link
Contributor

Currently the kubernetes plugin does not support to list and use a credential type of Docker Host Certificate Authentication.This PR will enable this . Please help check that if it is allowed to be merged. Thanks

Signed-off-by: Shuwei Hao haoshuwei24@gmail.com

Signed-off-by: Shuwei Hao <haoshuwei24@gmail.com>
Copy link
Member

@Vlatombe Vlatombe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems wrong to me to introduce a dependency on docker-commons.

Have you tried using the Certificate kind for credentials ? AFAIU it should cover the same use case.

@haoshuwei
Copy link
Contributor Author

It seems wrong to me to introduce a dependency on docker-commons.

Have you tried using the Certificate kind for credentials ? AFAIU it should cover the same use case.

Yeah, I have tried the Certificate kind for credentials, but it is more convenient to use Docker Host Certificate Authentication type because users can directly get the Client Key Client Certificate or Server CA Certificate content from a kubeconfig file, so I think we should support that type.

@Vlatombe
Copy link
Member

I understand the intent, but I feel uneasy pulling something that is labeled as docker specific into Kubernetes.

I would propose to retrofit DockerServerCredentials (and related classes) into credentials-plugin so that it can be used where it is needed.

@stephenc @carlossg any opinions on this topic?

@haoshuwei
Copy link
Contributor Author

I understand the intent, but I feel uneasy pulling something that is labeled as docker specific into Kubernetes.

I would propose to retrofit DockerServerCredentials (and related classes) into credentials-plugin so that it can be used where it is needed.

@stephenc @carlossg any opinions on this topic?

I agree, if the proposal to retrofit credentials-plugin is suitable. i can also help do this

@stephenc
Copy link
Member

I would propose to retrofit DockerServerCredentials (and related classes) into credentials-plugin so that it can be used where it is needed.

No thank you. Put them in a docker-credentials plugin and let everyone who needs them depend on that

@Vlatombe
Copy link
Member

Vlatombe commented Jun 27, 2019

Ok, so this is good. I would like the labeling for this kind of credentials to be modified (in docker-commons) in order to remove 'Docker' mention, since this is not specific to Docker actually.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants