1. --flatten to embed certificate

2. --context --minify to switch context

Signed-off-by: raymondmiaochaoyue <raymondmiaochaoyue@didichuxing.com>
This commit is contained in:
raymondmiaochaoyue 2022-09-07 17:53:16 +08:00
parent 9b817708c5
commit cbd0907745
1 changed files with 13 additions and 1 deletions

View File

@ -49,11 +49,23 @@ then
fi
MEMBER_CLUSTER_NAME=$4
TEMP_PATH="$(mktemp -d)"
MEMBER_CLUSTER_KUBECONFIG_NAME="$(basename "${MEMBER_CLUSTER_KUBECONFIG}")"
# --context & --minify will generate minified kubeconfig file with required context
# --flatten will embed certificate
kubectl config view --kubeconfig "${MEMBER_CLUSTER_KUBECONFIG}" \
--context "${MEMBER_CLUSTER_NAME}" --minify --flatten \
> "${TEMP_PATH}/${MEMBER_CLUSTER_KUBECONFIG_NAME}"
# check whether the kubeconfig secret has been created before
if ! kubectl --kubeconfig="${HOST_CLUSTER_KUBECONFIG}" --context="${HOST_CLUSTER_NAME}" get secrets -n karmada-system | grep "${MEMBER_CLUSTER_NAME}-kubeconfig"; then
# create secret
kubectl --kubeconfig="${HOST_CLUSTER_KUBECONFIG}" --context="${HOST_CLUSTER_NAME}" create secret generic ${MEMBER_CLUSTER_NAME}-kubeconfig --from-file=${MEMBER_CLUSTER_NAME}-kubeconfig="${MEMBER_CLUSTER_KUBECONFIG}" -n "karmada-system"
kubectl --kubeconfig="${HOST_CLUSTER_KUBECONFIG}" --context="${HOST_CLUSTER_NAME}" \
create secret generic "${MEMBER_CLUSTER_NAME}-kubeconfig" \
"--from-file=${MEMBER_CLUSTER_NAME}-kubeconfig=${TEMP_PATH}/${MEMBER_CLUSTER_KUBECONFIG_NAME}" \
-n "karmada-system"
fi
rm -rf "${TEMP_PATH}"
# deploy scheduler estimator
TEMP_PATH=$(mktemp -d)