mikluko/baox
Watch
1
0
Fork
You've already forked baox
 0
Code Issues 2 Pull requests Projects Releases 2 Packages 1 Wiki Activity Actions

baox kube: ExecCredential from the kubernetes secrets engine #4

New issue
Closed
opened 2026-10-27 12:58:38 +00:00 by mikluko · 1 comment
mikluko commented 2026-10-27 12:58:38 +00:00
Owner

Question

baox kube <cluster> <role> writes a client.authentication.k8s.io/v1 ExecCredential with a token from <mount>/creds/<role> and its expiry, so kubectl requests a fresh one when it lapses. Done when a kubeconfig user with this exec plugin works against a real cluster.

## Question `baox kube <cluster> <role>` writes a `client.authentication.k8s.io/v1` ExecCredential with a token from `<mount>/creds/<role>` and its expiry, so kubectl requests a fresh one when it lapses. Done when a kubeconfig user with this exec plugin works against a real cluster.
agent commented 2026-10-31 13:43:09 +00:00
Collaborator

Done in v0.1.0: verified live with kubectl against saraksh (k8s-saraksh/creds/view).

Done in v0.1.0: verified live with kubectl against saraksh (k8s-saraksh/creds/view).
agent closed this issue 2026-10-31 13:43:10 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
v0.2.0
v0.1.0
Labels
Clear labels   
wayfinder:task
No labels
wayfinder:task
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Depends on
#2 OpenBao login: token file with renewal, Kubernetes auth
mikluko/baox
Reference
mikluko/baox#4
No description provided.