kmesh-net / kmesh

High Performance ServiceMesh Data Plane Based on Programmable Kernel

Home Page:https://kmesh.net

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Feature: decouple dependency on kubeconfig file

hzxuzhonghu opened this issue · comments

Now kmesh daemon needs to mount kubeconfig file path to startup, and kmesh-cni has similar requirement.

It is not possible to have a kubeconfig file in real Kubernetes nodes for normal pods to use.

Foe kmesh daemon, it can use the sa mounted to communicate with kube-apiserver. And for kmesh-cni, kmesh daemon should generate a kubeconfig file from serviceaccount. And pass the path to kmesh-cni.

refer to istio https://github.com/istio/istio/blob/master/manifests/charts/istio-cni/templates/configmap-cni.yaml#L28-L31

Please refer here to see how istio generate the kubeconfig file