I have a k8s cluster and I saved another k8s cluster s kubec Pulumi Community #general

I have a k8s cluster, and I saved another k8s clus...

narrow-author-62348

05/05/2020, 10:37 AM

I have a k8s cluster, and I saved another k8s cluster’s kubeconfig in the first k8s cluster as secret. I want to build a k8s provider from the kubeconfig secret.

Copy code

export const secret = k8s.core.v1.Secret.get("kubeconfig", "admin/kubeconfig-for-admin");
export const k8sProvider = new k8s.Provider("new-cluster", {
    kubeconfig: secret.stringData["kubeconfig"],
});

But the

k8sProvider

does not work as expected, I couldn’t see the kubeconfig field in it. Does anyone know why it is that? I’m pretty sure the kubeconfig was stored as base64 string in the

admin/kubeconfig-for-admin

better-rainbow-14549

05/05/2020, 11:31 AM

we do it without any problem, but from an azure keyvault

better-rainbow-14549

05/05/2020, 11:32 AM

perhaps its to do with base64 encoding, can you access the binaryData field or something maybe

better-rainbow-14549

05/05/2020, 11:32 AM

we pretty much do :

Copy code

const kubeConfig = azure.keyvault.getSecret({
            keyVaultId: keyvaultId,
            name: args.KubeConfigSecretName
        });
return new kubernetes.Provider(name, { kubeconfig: kubeConfig.value })

better-rainbow-14549

05/05/2020, 11:35 AM

fwiw, when we create the secret it's from kubeConfigRaw property of the cluster

narrow-author-62348

05/05/2020, 12:32 PM

Thanks, do you know how to retrieve the secret data from k8s secret? The

secret.data

pulumi.Output<object>

, I don’t know how to extract the specific value from it.

better-rainbow-14549

05/05/2020, 12:33 PM

use .apply()

better-rainbow-14549

05/05/2020, 12:33 PM

https://www.pulumi.com/docs/intro/concepts/programming-model/#outputs

better-rainbow-14549

05/05/2020, 12:34 PM

so like secret.data.apply(s => new kubernetes.Provider(.. { kubeconfig: s })) or something like that

narrow-author-62348

05/05/2020, 2:12 PM

After some Googling I finally make it work:

Copy code

const secret = k8s.core.v1.Secret.get("kubeconfig", "admin/kubeconfig-for-admin");
type secretData = { [key: string]: string };
export const kubeconfig = secret.data.apply(v => Buffer.from((v as secretData)["kubeconfig"], "base64").toString("ascii"));
const provider = new k8s.Provider("cluster", {
    kubeconfig: kubeconfig,
});

Thanks for your help @better-rainbow-14549.

👍 1

2 Views

Open in Slack

Previous Next