Use the credentialissuer in the pinniped docs

[antgamdia]

Description of the change

As pointed out offline by the Pinniped folks, we should use the CredentialIssuer in our docs (instead of referring users to svc and secrets directly).

Benefits

Docs will no longer be coupled to a given svc and secret names and they will be more Pinniped-compliant.

Possible drawbacks

N/A

Applicable issues

N/A

Additional information

N/A

[absoludity]

Fine as is, just wondering whether it'd be better to just have one command to just query to return all the strategies so that the user has more context if something isn't as expected (like not enabled), and have them copy both fields from that output? See what you think, but fine as is.

[antgamdia]

Mmm, I think users will just have to delete parts of the jq query. The whole output will be:

k get credentialissuer -o json | jq -c '.items[].status.strategies[] | select( .type | contains("ImpersonationProxy"))

{
    "frontend": {
        "impersonationProxyInfo": {
            "certificateAuthorityData": "redacted",
            "endpoint": "https://redacted"
        },
        "type": "ImpersonationProxy"
    },
    "lastUpdateTime": "2021-05-05T22:19:45Z",
    "message": "impersonation proxy is ready to accept client connections",
    "reason": "Listening",
    "status": "Success",
    "type": "ImpersonationProxy"
}

For users who just want to know what should they copy, I think it's ok as is. And, for those interested in the whole output, I'm sure they will figure it out.