elotl / kip

Virtual-kubelet provider running pods in cloud instances
Apache License 2.0
223 stars 14 forks source link

Use secure channel to distribute cell certificate, key and configuration #194

Closed ldx closed 3 years ago

ldx commented 3 years ago

Right now Kip uses cloud-init files (i.e. instance meta-data) to distribute configuration and files that might contain sensitive information.

Instead, we need an option to have Kip use a channel that is secure to push data or configuration to cells when provisioning them.