Page MenuHomePhabricator

[toolforge-weld] Allow passing embedded certs in the kubeconfig
Closed, ResolvedPublic

Description

For the replica_cnf_api service we load the user's kubeconfig using sudo embedded in a yaml data chunk so the main api does not need direct access to the user files.

But then we need to be able to load that configuration directly, and it would be preferred if we don't have to change permissions or create temporary files with the certificates/keys.

Details

TitleReferenceAuthorSource BranchDest Branch
d/changelog: bump to 1.2.1repos/cloud/toolforge/toolforge-weld!32dcarobump_versionmain
api_client: add support for embedded certificatesrepos/cloud/toolforge/toolforge-weld!29dcarosupport_embedded_certsmain
Customize query in GitLab

Event Timeline

dcaro changed the task status from Open to In Progress.Aug 17 2023, 12:25 PM
dcaro moved this task from Next Up to In Progress on the Toolforge Build Service (Iteration 18) board.
dcaro changed the task status from In Progress to Stalled.Aug 28 2023, 2:56 PM
dcaro changed the task status from Stalled to In Progress.

Mentioned in SAL (#wikimedia-cloud) [2023-08-30T10:05:53Z] <dcaro> upgrade toolforge-weld to 1.2.1 (T344155)

Mentioned in SAL (#wikimedia-cloud) [2023-08-30T10:06:43Z] <dcaro> upgrade toolforge-weld to 1.2.1 (T344155)