mirror of
https://github.com/siderolabs/talos.git
synced 2025-08-14 10:37:04 +02:00
84e712a9f1
We add a new CRD, `serviceaccounts.talos.dev` (with `tsa` as short name), and its controller which allows users to get a `Secret` containing a short-lived Talosconfig in their namespaces with the roles they need. Additionally, we introduce the `talosctl inject serviceaccount` command to accept a YAML file with Kubernetes manifests and inject them with Talos service accounts so that they can be directly applied to Kubernetes afterwards. If Talos API access feature is enabled on Talos side, the injected workloads will be able to talk to Talos API. Closes siderolabs/talos#4422. Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com> |
||
|---|---|---|
| .. | ||
| api.go | ||
| apply-config.go | ||
| discovery.go | ||
| diskusage.go | ||
| dmesg.go | ||
| etcd-recover.go | ||
| etcd.go | ||
| events.go | ||
| generate-config.go | ||
| logs.go | ||
| machine-status.go | ||
| reboot.go | ||
| reset.go | ||
| serviceaccount.go | ||
| update-endpoint.go | ||
| update-hostname.go | ||
| version.go | ||