The reason i created this small tool was to have an automated way of configuring kubectl. Just like running e.g. aws eks update-kubeconfig --name <cluster name> --region <region> in AWS but in this case for a OpenStack created Magnum cluster.

This small tool does the following:

1. Fetches the cluster specific CA certificate stored in OpenStack. Only the creator of the cluster can fetch this at the moment. Will be used as CA to be able to validate the Kubernetes API server certificate.
2. Creates a custom made kubeconfig that will utilize the client side Keystone binary when authenticting against Kubernetes.

• OpenStack Magnum (stable/stein)
• Magnum created k8s cluster of version >1.12
• Keystone server side auth component >1.16
• Keystone client side auth component >1.16
• Keystone policy ConfigMap with a v2 auth policy

Add more info here

Add more info here