mirror of https://github.com/open-cluster-management-io/ocm.git synced 2026-02-14 10:00:11 +00:00

Files

Jian Qiu 4b3cb4f45b Access spoke api using cluster-proxy (#49 )

* Access spoke api using cluster-proxy

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Add remote access scenario

Signed-off-by: Jian Qiu <jqiu@redhat.com>

2022-05-19 05:44:18 -04:00

1.3 KiB

Raw Permalink Blame History

Access APIServer of managed cluster

Prerequisite

Set up the dev environment in your local machine following setup dev environment.
helm is installed
Add ocm helm repo with helm repo add ocm https://openclustermanagement.blob.core.windows.net/releases/

Install cluster-proxy and managed-serviceaccount addon on the clusters

Install cluster-proxy addon:

helm install \
    -n open-cluster-management-addon --create-namespace \
    cluster-proxy ocm/cluster-proxy

Check the status of the cluster-proxy addon

clusteradm get addon cluster-proxy

Install managed-serviceaccount addon:

helm install \
    -n open-cluster-management-addon --create-namespace \
    managed-serviceaccount ocm/managed-serviceaccount

Check the status of the managed-serviceaccount addon

clusteradm get addon managed-serviceaccount

Create a managed service account and set rbac

Create managed-service account on hub

kubectl apply -f manifests/managed-sa.yaml

create a clusterrolebinding on managed cluster to set permission for this service account

clusteradm create work rbac -f manifests/clusterrolebinding.yaml --cluster cluster1

Use the clusteradm proxy command

clusteradm proxy kubectl --cluster=cluster1 --sa=test --args="get nodes"

1.3 KiB Raw Permalink Blame History