f945f6a916
Once the id_token expires, kubectl uses the refresh token to obtain new id_token and refresh token. This process requires the attribute idp-certificate-authority under users.user.auth-provider.config in the kubeconfig file, which was missing when this file was generated. This patchset adds the attribute in values.yaml that will be used to generate the config.yaml file for the authenticator container, which will include the instructions for including the missing idp-certificate-authority and associated certificate in the kubeconfig file. Also, added the namespace for the templates as dex needs to be deployed in the same namespace as the target-cluster management resources, e.g., target-infra. Relates-to: #6 Change-Id: Ie871d1d47f160da035fdfa80016699c519d4c2dd
Airship Charts
The Airship charts repository is home to a collection of
Helm charts developed and maintained by the Airship community, generally
for Airship- or Airship-adjacent use cases.
To learn more about the Airship 2.0 evolution, reference the Airship blog series.
Contributing
The Airship team prefers to use upstream Helm charts, maintained by
the deployed projects themselves, as much as possible. Therefore, charts
are only added to this charts repo when truly needed. Our
community practice is to propose and defend the need for a new chart in
our weekly IRC meeting (mirrored in our Slack channel). Please bring a
new chart up in that forum prior to pushing a patchset to add it.
To get looped into our team meetings and community, please visit the Airship wiki, and read our developer guide to begin contributing.
We also encourage new contributors and operators alike to join us in our Slack workspace and subscribe to our mailing lists.