https://github.com/danil-grigorev/rancher-bind

Kube-bind plugin for rancher
https://github.com/danil-grigorev/rancher-bind

fleet gitops kube-bind rancher rancher-bind

Last synced: about 1 month ago
JSON representation

Kube-bind plugin for rancher

• Host: GitHub
• URL: https://github.com/danil-grigorev/rancher-bind
• Owner: Danil-Grigorev
• License: apache-2.0
• Created: 2023-11-07T10:59:35.000Z (about 1 year ago)
• Default Branch: main
• Last Pushed: 2023-11-27T15:12:23.000Z (about 1 year ago)
• Last Synced: 2024-10-14T14:20:10.653Z (2 months ago)
• Topics: fleet, gitops, kube-bind, rancher, rancher-bind
• Language: Go
• Homepage:
• Size: 144 KB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# rancher-bind

## What is it?

This repository hosts the backend implementation for the [kube-bind][] project for rancher.

This allows external clusters to consume rancher native services without a need for installation.

- The exposed rancher CRDs gets installed in the consumer cluster, objects are syncronized with the provider side.

- Permissions for the consumer cluster access are added gradually based on the APIServiceBinding spec.

- The service provider does not inject controllers/operators into the service consumer's cluster.

Functionality, such as fine-grained kubeconfig for rancher cluster is exposed via plugin commands.

[kube-bind]: https://github.com/kube-bind/kube-bind

## Prerequisites

- [Kubectl][]

- [Krew][]

- [Rancher][]

[Kubectl]: https://kubernetes.io/docs/tasks/tools/#kubectl

[Rancher]: https://ranchermanager.docs.rancher.com/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster

[Krew]: https://krew.sigs.k8s.io/docs/user-guide/setup/install/

## Try it out

### Fine-grained kubeconfig for Rancher cluster

```shell

# export KUBECONFIG=/tmp/rancher-kubeconfig

kubectl krew index add rancher-bind https://github.com/Danil-Grigorev/rancher-bind.git

kubectl krew install rancher-bind/rancher-bind

kubectl rancher-bind -f ./example-role.yaml -d > kubeconfig

cat kubeconfig

# Outputs:

# apiVersion: v1

# kind: Config

# clusters:

# - name: "local"

# ...

# export KUBECONFIG=/tmp/consumer-kubeconfig

# Populate an api.yaml file with the CRD resource/group to export

# Example:

# cat api.yaml

# kind: APIServiceExportRequest

# apiVersion: kube-bind.io/v1alpha1

# metadata:

#   name: export-clusters

# spec:

#   resources:

#     - group: "provisioning.cattle.io"

#       resource: "clusters"

kubectl krew index add bind https://github.com/kube-bind/krew-index.git

kubectl krew install bind/bind

kubectl bind apiservice --remote-kubeconfig ./kubeconfig --remote-namespace default -f api.yaml

```

Apply the desired CR resource in a consumer cluster and watch the status changes!