Controllers must be able to authenticate API calls from metacontroller

GoogleCloudPlatform / metacontroller

Lightweight Kubernetes controllers as a service

https://metacontroller.app/

Apache License 2.0

792 stars 111 forks source link

Open drdivano opened 5 years ago

drdivano commented 5 years ago

Is there a way for controllers to authenticate calls from metacontroller (coming via sync webhook)?

As I understand, I can restrict calls to webhooks using NetworkPolicy, however it is unavailable in some clusters.

mikebryant commented 5 years ago

FYI: Another option (again not available in all clusters) is using RBAC in istio