flexkube / libflexkube

Go library for installing and managing Kubernetes clusters
https://flexkube.github.io/
Apache License 2.0
35 stars 7 forks source link

Enable etcd user management #53

Open invidian opened 4 years ago

invidian commented 4 years ago

So kube-apiserver can use root user (as it needs to have access to trigger compaction, see etcd-io/etcd#8458) and then Prometheus Operator can have certificates with no access to data.

invidian commented 4 years ago

Also relevant #98.

invidian commented 4 years ago

See also https://github.com/etcd-io/etcd/issues/8458.