Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[feature] Implement omnictl auth for omnictl + talosctl + kubectl in one command. #607

Open
usrbinkat opened this issue Sep 2, 2024 · 0 comments

Comments

@usrbinkat
Copy link

usrbinkat commented Sep 2, 2024

Problem Description

Current omnictl/kubectl/talosctl authentication appears to be a passive UX, and each tool authenticates individually resulting in a UX friction and an inconsistent auth experience.

Additionally, per @rothgar 's observation we should also support multi cluster auth on a per Omni basis.

Solution

Enhance omnictl with a single oidc credential handler set of subcommand that correctly provision credentials in one go for all 3 tools with appropriate flags to constrain local credential provisioning more granularly when desired.

Also worth considering on this auth command flow is --force-rotate which should be able to clear current credentials and re-create files/directories for credentials from scratch on demand to resolve issue with "file not found" type errors that require manually tracking down and purging current auth artifacts in devcontainer settings.

Alternative Solutions

na

Notes

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant