| commit | cc078df2124306799c66786833746999259ea792 | [log] [tgz] |
|---|---|---|
| author | Lorenz Brun <lorenz@monogon.tech> | Thu Dec 23 11:51:55 2021 +0100 |
| committer | Lorenz Brun <lorenz@monogon.tech> | Wed Feb 02 14:07:37 2022 +0000 |
| tree | 43807fcfec2196430b4bd4def124dad2231451db | |
| parent | 8c2c771a750f30b3edf240fc8352e777795e989b [diff] |
m/n/kubernetes: implement Metropolis authenticating proxy This implements an authenticating proxy for K8s which can authenticate Metropolis credentials and passes the extracted identity information back to the Kubernetes API server. It currently only handles user authentication, machine-to-machine authentication is still done by the API server itself. It also adds a role binding to allow full access to the owner as we do not have an identity system yet. Change-Id: I02043924bb7ce7a1acdb826dad2d27a4c2008136 Reviewed-on: https://review.monogon.dev/c/monogon/+/509 Reviewed-by: Sergiusz Bazanski <serge@monogon.tech>
This is the main repository containing the source code for the Monogon Project.
This is pre-release software - feel free to look around, and check back later for our first release!
Our build environment requires a working Podman binary (your distribution should have one).
Spinning up: scripts/create_container.sh
Spinning down: scripts/destroy_container.sh
Running commands: scripts/run_in_container.sh <...>
Using bazel using a wrapper script: scripts/bin/bazel <...> (add to your local $PATH for convenience)
This repository is compatible with the IntelliJ Bazel plugin, which enables full autocompletion for external dependencies and generated code. All commands run inside the container, and necessary paths are mapped into the container.
The following steps are necessary:
Install Google's Bazel plugin in IntelliJ. On IntelliJ 2020.3 or later, you need to install a beta release of the plugin.
Add the absolute path to your ~/.cache/bazel-monogon folder to your idea64.vmoptions (Help → Edit Custom VM Options) and restart IntelliJ:
-Dbazel.bep.path=/home/leopold/.cache/bazel-monogon
Set "Bazel Binary Location" in Other Settings → Bazel Settings to the absolute path of scripts/bin/bazel. This is a wrapper that will execute Bazel inside the container.
Use File → Import Bazel project... to create a new project from .bazelproject.
After running the first sync, everything should now resolve in the IDE, including generated code.
Launch the node:
scripts/bin/bazel run //:launch
Run a kubectl command:
scripts/bin/bazel run //metropolis/cli/dbg -- kubectl describe
Run tests:
scripts/bin/bazel test //...