Package com.morpheusdata.core.providers

Interface KubernetesClusterProvider.CredentialsFacet

Enclosing interface:

KubernetesClusterProvider

public static interface KubernetesClusterProvider.CredentialsFacet

Managed Kubernetes offerings issue API credentials from the cloud control plane rather than from a long-lived in-cluster service account. Implement this facet to supply those bootstrap credentials; Morpheus uses them to create its own morpheus service account on the cluster and then owns the durable token and all subsequent plumbing.

Credentials are returned as a KubeApiCredentials bundle because offerings authenticate differently: EKS/GKE issue a bearer token while AKS issues a client certificate / key pair. This is the seam currently represented by generateClusterToken (EKS), refreshKubeAPIToken (AKS), and the equivalent token exchange (GKE).

Method Summary

Modifier and Type	Method	Description
ServiceResponse<KubeApiCredentials>	getClusterApiCredentials(ComputeServerGroup cluster)	Obtain the bootstrap credentials used to authenticate against the managed cluster's Kubernetes API server.

Method Details

getClusterApiCredentials

ServiceResponse<KubeApiCredentials> getClusterApiCredentials(ComputeServerGroup cluster)

Obtain the bootstrap credentials used to authenticate against the managed cluster's Kubernetes API server.

Parameters:

cluster - the cluster whose API credentials should be (re)issued

Returns:

a ServiceResponse whose data carries the KubeApiCredentials on success