IstioOperator multiCluster:clusterName auth.go:35 certificate-provider "msg"="failed to authenticate request" "error"="could not get cluster cluster-1's kube client"

[cert-manager]

IstioOperator multiCluster:clusterName auth.go:35 certificate-provider "msg"="failed to authenticate request" "error"="could not get cluster cluster-1's kube client"

[JoshVanL]

@palimarium sure thing! I'll push a v0.1.1 now.

[palimarium]

Tested now with cluster.local but still doesn't seem to work.

E0201 10:04:58.945874       1 auth.go:35] certificate-provider "msg"="failed to authenticate request" "error"="could not get cluster cluster.local's kube client"  
E0201 10:04:59.084455       1 auth.go:35] certificate-provider "msg"="failed to authenticate request" "error"="could not get cluster cluster.local's kube client"  
E0201 10:04:59.788517       1 auth.go:35] certificate-provider "msg"="failed to authenticate request" "error"="could not get cluster cluster.local's kube client" 

I look forward to this release!

[JoshVanL]

Hi @palimarium,

Great to see it working for you in the default case!

Auth is currently limited to token, and only the default cluster name. This definitely something we want to include.

/feature
/assign

[JoshVanL]

/kind feature

[jetstack-bot]

@JoshVanL: The label(s) kind/feature cannot be applied, because the repository doesn't have them

In response to this:

/kind feature

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[palimarium]

Hi @JoshVanL

Thank you that you are planning to extend the capabilities!

In the meantime is there any workaround for this? What is the default cluster name, that istio-csr use for auth? If I use this name in the multiCluster(clusterName) config, it should work?

Thanks!

[JoshVanL]

@palimarium My feeling is cluster.local is one that would work.. though not tested. Intent to pick this up over the next couple days.

[palimarium]

Hi @JoshVanL

I have tested your fix and works like a charm!
Any chance to get this pushed into a new release? so can be easily installed with the default helm chart?

Thanks a lot!