aws-iam-authenticator v0.5.1 backend-mode(s)

[fred-vogt]

Would like to get this one in before the first office hours in July 2020.

1. Describe IN DETAIL the feature/behavior/change you would like to see.
Support for backend-modes that don't require restarting the containers running on masters when mappings are updated.

Currently kops deploys aws-iam-authenticator with a volume mounted ConfigMap - this is the mounted-file backend-mode.

@rifelpet - I think you were going to add a clusterspec.authentication.aws.backendMode setting already.

2. Feel free to provide a design supporting your feature request.

  authentication:
    aws:
      backendMode: CRD,EKSConfigMap,MountedFile

BTW - Tested with latest release - Its safe to use as new default image

  authentication:
    aws: 
      image: 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon/aws-iam-authenticator:v0.5.1-stretch

Docs

• https://kubernetes-kops.netlify.app/authentication/
  • https://github.com/kubernetes/kops/blob/master/docs/authentication.md

Links

• https://github.com/kubernetes/kops/blob/master/docs/releases/1.17-NOTES.md#known-issues
  • Update AWS IAM Authenticator to 0.5.0
• https://github.com/kubernetes-sigs/aws-iam-authenticator/releases/tag/v0.5.1

[rifelpet]

I agree this would be great to have, thanks for outlining this!

Theres a WIP PR already for updating the image: #8991 and we can probably do the API changes in a separate PR.

marking this as good first issue because the api change is pretty straight forward. the development docs have a good walkthrough on how to do this if anyone is interested in taking it on.

[fred-vogt]

@rifelpet - I over hauled my test setup to provide "full" support for running custom kops builds.

I think I can provide an implementation PR for this early next week.
I'll need to do some testing / thinking about the various modes.

[rifelpet]

This has been implemented as linked above and will be in Kops 1.19.0

/close

[k8s-ci-robot]

@rifelpet: Closing this issue.

In response to this:

This has been implemented as linked above ^

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.