1# GCP credential provider for e2e testing
2
3This package contains a barebones implementation of the [kubelet GCP credential
4provider](https://github.com/kubernetes/cloud-provider-gcp/tree/master/cmd/auth-provider-gcp)
5for testing purposes only. This plugin SHOULD NOT be used in production.
6
7This credential provider is installed and configured in the node e2e tests by:
8
91. Building the gcp-credential-provider binary and including it in the test archive
10 uploaded to the GCE remote node.
11
122. Writing the credential provider config into the temporary workspace consumed
13 by the kubelet. The contents of the config should be something like this:
14
15```yaml
16kind: CredentialProviderConfig
17apiVersion: kubelet.config.k8s.io/v1alpha1
18providers:
19 - name: gcp-credential-provider
20 apiVersion: credentialprovider.kubelet.k8s.io/v1alpha1
21 matchImages:
22 - "gcr.io"
23 - "*.gcr.io"
24 - "container.cloud.google.com"
25 - "*.pkg.dev"
26 defaultCacheDuration: 1m`
27```
28
293. Configuring the following additional flags on the kubelet:
30
31```
32--feature-gates=DisableKubeletCloudCredentialProviders=true
33--image-credential-provider-config=/tmp/node-e2e-123456/credential-provider.yaml
34--image-credential-provider-bin-dir=/tmp/node-e2e-12345
35```
View as plain text