{"id":19857905,"url":"https://github.com/googlecontainertools/gcp-auth-webhook","last_synced_at":"2025-05-02T02:30:42.142Z","repository":{"id":37565056,"uuid":"280201998","full_name":"GoogleContainerTools/gcp-auth-webhook","owner":"GoogleContainerTools","description":"A Kubernetes webhook for automated GCP authentication.","archived":false,"fork":false,"pushed_at":"2025-03-20T02:35:36.000Z","size":554,"stargazers_count":20,"open_issues_count":7,"forks_count":17,"subscribers_count":7,"default_branch":"main","last_synced_at":"2025-04-06T21:06:28.008Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/GoogleContainerTools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-07-16T16:22:24.000Z","updated_at":"2025-01-29T18:18:07.000Z","dependencies_parsed_at":"2023-11-16T14:36:38.441Z","dependency_job_id":"620582b1-1ce5-4bef-82e2-1ed126823ab0","html_url":"https://github.com/GoogleContainerTools/gcp-auth-webhook","commit_stats":{"total_commits":121,"total_committers":7,"mean_commits":"17.285714285714285","dds":0.5537190082644627,"last_synced_commit":"d3c17c864d0e0ace836775e355779c3c233017a5"},"previous_names":[],"tags_count":18,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fgcp-auth-webhook","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fgcp-auth-webhook/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fgcp-auth-webhook/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fgcp-auth-webhook/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/GoogleContainerTools","download_url":"https://codeload.github.com/GoogleContainerTools/gcp-auth-webhook/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":251972424,"owners_count":21673600,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-12T14:20:12.743Z","updated_at":"2025-05-02T02:30:41.232Z","avatar_url":"https://github.com/GoogleContainerTools.png","language":"Go","readme":"# gcp-auth-webhook\n\nA server that includes:\n* A mutating webhook that will patch any newly created pods in your Kubernetes cluster with GCP credentials (whose location is currently hardcoded to /var/lib/minikube/google_application_credentials.json).\n* A mutating webhook that will patch any newly created service accounts in your Kubernetes cluster with an image pull secret.\n* A thread that monitors namespaces to make sure all namespaces include a image pull secret to be able to pull from GCR and AR.\n\nSetting the environment variable `MOCK_GOOGLE_TOKEN` to `true` will prevent using the google application credentials to fetch the token used for the image pull secret. Instead the token will be mocked.\n\n## Deployment\nUse the image `gcr.io/k8s-minikube/gcp-auth-webhook` as the image for a Deployment in your Kubernetes manifest and add that to a MutatingWebhookConfiguration. See [minikube](https://github.com/kubernetes/minikube/blob/master/deploy/addons/gcp-auth/gcp-auth-webhook.yaml.tmpl) for details.\n\n## Running Locally\nThe easiest way to run the server locally is:\n* Modify [minikube's](https://github.com/kubernetes/minikube/blob/master/deploy/addons/gcp-auth/gcp-auth-webhook.yaml.tmpl) gcp-auth Deployment image to be `local/gcp-auth-webhook:$(VERSION)` (replace `$(VERSION)` with your version)\n* Build and run minikube\n* Run `eval $(path_to_minikube/minikube docker-env)` and then `make local-image` to make the image available from within minikube\n* Run `path_to_minikube/minikube addons enable gcp-auth` to enable the addon, which creates a pod in the `gcp-auth` namespace with the gcp-auth-webhook server","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgooglecontainertools%2Fgcp-auth-webhook","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgooglecontainertools%2Fgcp-auth-webhook","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgooglecontainertools%2Fgcp-auth-webhook/lists"}