3 Commits

Author	SHA1	Message	Date
Andrew Keesler	6b620f1777	exec credential provider: add install hint ... This commit adds the ability for users to specify an install hint for their exec credential provider binary. In the exec credential provider workflow, if the exec credential binary does not exist, then the user will see some sort of ugly exec: exec: "does-not-exist": executable file not found in $PATH error message. If some user downloads a kubeconfig from somewhere, they may not know that kubectl is trying to use a binary to obtain credentials to auth to the API, and scratch their head when they see this error message. Furthermore, even if a user does know that their kubeconfig is trying to run a binary, they might not know how to obtain the binary. This install hint seeks to ease the above 2 user pains. Signed-off-by: Andrew Keesler <akeesler@vmware.com> Kubernetes-commit: 94e2065df2eef3b198942efb156ef6e27abcc6f9	2020-05-20 15:20:20 -04:00
Andrew Lytvynov	c669580288	Add TLS support to exec authenticator plugin ... https://github.com/kubernetes/community/blob/master/contributors/design-proposals/auth/kubectl-exec-plugins.md#tls-client-certificate-support Allows exec plugin to return raw TLS key/cert data. This data populates transport.Config.TLS fields. transport.Config.TLS propagates custom credentials using tls.Config.GetClientCertificate callback. On key/cert rotation, all connections using old credentials are closed Kubernetes-commit: cd89f9473faa60c15b8e9d223e5c4f9dab53627a	2018-05-30 14:03:32 -07:00
Eric Chiang	19c591bac2	client-go: add an exec-based client auth provider ... Kubernetes-commit: 6463e9efd9ba552e60d2555a3e6526ef90196473	2018-02-07 15:43:12 -08:00