It does so by binding a user-specified ClusterRole to the service account referred to in the provided UpstreamClusterLink resource. The purpose of the APIExportRoleBinding is to provide downstream users with necessary permissions on the Upstream Cluster. # Reference to the kubernetes Service providing access to the API proxy # Secret containing the kubeconfig to connect to the Service Cluster Deploys the API-aggregation server that is configured to proxy to the Service Cluster using the provided service account token.ĪpiVersion: .com/v1alpha1.Contains information about the corresponding Service Cluster - url, name, ca cert and service account token.
Its primary purpose is to manage an API aggregation server that will eventually be used to project specific APIs. The DownstreamClusterLink resource is created on a Workload Cluster. # Created Service Account that will be used by the Workload Cluster Its main purpose is to manage a Service Account that will be used by components running in a Workload Cluster. The UpstreamClusterLink resource is created on a Service Cluster. Resources Projection Plane UpstreamClusterLink and DownstreamClusterLink Resource Replication - Synchronizes core Kubernetes resources across Kubernetes clusters.API Projection - Makes custom Kubernetes APIs installed on a Service Cluster (upstream) available in a Workload Cluster (downstream).Projection Plane - Defines an "upstream" and "downstream" relationship between a pair of Kubernetes clusters, namely between a Service Cluster (upstream) and a Workload Cluster (downstream).This document introduces a number of concepts. Workload Cluster - A Kubernetes cluster that has developer-created applications running on it.Service Cluster - A Kubernetes cluster that has Service Resource Lifecycle APIs installed and a corresponding controller managing their lifecycle.Service Resource Lifecycle API - Any Kubernetes API that can be used to manage the lifecycle (CRUD) of a Service Resource.Service Resources - Things like databases, message queues, caches, DNS records, firewall rules, virtual networks, etc.See the documentation on installing the latest release of the SCP Toolkit to get started and refer to Topology for information on supported topologies.
0 kommentar(er)
