This message was deleted.
# generala
adamant-kite-43734
09/25/2023, 6:34 AMThis message was deleted.
s
stale-portugal-8315
09/26/2023, 12:19 AMThat’s a good question - following
❤️ 1
r
rich-plumber-96719
09/27/2023, 7:30 PMkubectl get authconfigs
m
many-nail-29864
10/02/2023, 6:07 PMYou may also be looking into:
GlobalRoleBinding.management.cattle.io to give permission
RoleTemplate.management.cattle.io to setup roletemplate that used on downstream cluster
Setting.management.cattle.io to customize certain part of the auth parameters
Project.management.cattle.io in the cluster namespace (obs, part of the name random) to create project)
ClusterRoleTemplateBinding.management.cattle.io in cluster namespace)to give clusterpermission, and
ProjectRoleTemplateBinding.management.cattle.io in the cluster-project namespace to give project roles
many-nail-29864
10/02/2023, 6:08 PMWe have some setup in ArgoCD to create our downstream clusters and set permission in them
s
stale-portugal-8315
10/02/2023, 6:54 PMOh interesting, has the worked well for you/your team?
m
many-nail-29864
10/02/2023, 7:47 PMIt's good for setting up clusters, projects and onboarding, but when you need to change groups you can't update without removing old
many-nail-29864
10/02/2023, 7:49 PMWhen I did the first version (a year ago) the cards wasn't documented so you need to read the API/terraform doc. I have tried to let our contact know that really need to improve the doc of the crds so kubectl explain works
many-nail-29864
10/02/2023, 7:50 PMWe are also having argocd to create clusters for pull request validation, mostly throught Kubernetes objects
many-nail-29864
10/02/2023, 7:51 PMSome parts like doing integration to hashicorp vault and ipam is call to terraform currently
many-nail-29864
10/02/2023, 7:52 PMThe hard part was to understand that the cluster is random, even if old code says that it was a checksum of some parts