Add Image Credential Provider flags for Kubelet on Azure

openshift · Mar 4, 2024 · 286623c · 286623c
1 parent 398c171
commit 286623c
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 1 deletion.
diff --git a/pkg/controller/template/render.go b/pkg/controller/template/render.go
@@ -467,6 +467,8 @@ func credentialProviderConfigFlag(cfg RenderConfig) interface{} {
 	switch cfg.Infra.Status.PlatformStatus.Type {
 	case configv1.AWSPlatformType:
 		return fmt.Sprintf("%s %s%s", credentialProviderBinDirFlag, credentialProviderConfigFlag, "ecr-credential-provider.yaml")
+	case configv1.AzurePlatformType:
+		return fmt.Sprintf("%s %s%s", credentialProviderBinDirFlag, credentialProviderConfigFlag, "acr-credential-provider.yaml")
 	default:
 		return ""
 	}

diff --git a/pkg/controller/template/render_test.go b/pkg/controller/template/render_test.go
@@ -311,7 +311,7 @@ func TestCredentialProviderConfigFlag(t *testing.T) {
 		},
 		{
 			platform: configv1.AzurePlatformType,
-			res:      "",
+			res:      "--image-credential-provider-bin-dir=/usr/libexec/kubelet-image-credential-provider-plugins --image-credential-provider-config=/etc/kubernetes/credential-providers/acr-credential-provider.yaml",
 		},
 		{
 			platform: configv1.GCPPlatformType,

diff --git a/...lates/common/azure/files/etc-kubernetes-credential-providers-acr-credential-provider.yaml b/...lates/common/azure/files/etc-kubernetes-credential-providers-acr-credential-provider.yaml
@@ -0,0 +1,18 @@
+mode: 0644
+path: "/etc/kubernetes/credential-providers/acr-credential-provider.yaml"
+contents:
+  inline: |
+    apiVersion: kubelet.config.k8s.io/v1
+    kind: CredentialProviderConfig
+    providers:
+      - name: acr-credential-provider
+        apiVersion: credentialprovider.kubelet.k8s.io/v1
+        defaultCacheDuration: "10m"
+        matchImages:
+          - "*.azurecr.io"
+          - "*.azurecr.cn"
+          - "*.azurecr.de"
+          - "*.azurecr.us"
+        args:
+        - /etc/kubernetes/cloud.conf
+