Skip to content

Stop using basic auth for GKE cluster creation

What does this MR do?

Fixes #331922 (closed) by removing the use of basic auth and instead using the same OAuth token as the one used to create the cluster to bootstrap the Kubernetes API token.

/cc @Alexand

Screenshots (strongly suggested)

Creating Created
Screenshot_2021-05-26_at_17.19.35 Screenshot_2021-05-26_at_17.19.48

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

Does this MR contain changes to processing or storing of credentials or tokens, authorization and authentication methods or other items described in the security review guidelines? If not, then delete this Security section.

  • [-] Label as security and @ mention @gitlab-com/gl-security/appsec
  • [-] The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • [-] Security reports checked/validated by a reviewer from the AppSec team
Edited by Hordur Freyr Yngvason

Merge request reports

Loading