Providing the Git private SSH key via its filepath is not GitOps friendly #1533
Labels
area/config-file
area/gitops
gitops related issues
kind/feature
New feature or request
priority/important-longterm
Important over the long term, but may not be currently staffed and/or may require multiple releases
Problem
Currently, we accept
--git-private-ssh-key-path
and will soon have the equivalent inClusterConfig
. However, this will not work well with a cluster-level GitOps approach, as the file path only is meaningful for the local machine.Solution
Instead, we should refer a key in a Kubernetes
Secret
or in AWS, e.g.:eksctl create keypair $keyName --from-file /path/to/private/ssh/key/file/id_rsa
eksctl enable repo
the following way:eksctl enable repo --git-private-ssh-key-name $keyName
eksctl enable repo -f /path/to/clusterconfig.yaml
$keyName
present in there.See also #1211, #1273
The text was updated successfully, but these errors were encountered: