Skip to content

Conversation

danopia
Copy link
Member

@danopia danopia commented Sep 18, 2025

For each client:

  1. InCluster needs environment variable NODE_EXTRA_CA_CERTS=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt.

    • I don't see how to configure a CA in-process without depending on npm:undici.
  2. KubectlRaw needs to be ported from Deno.Command to node:child_process which I don't really want to do 😒

  3. KubeConfig has similar constraints as InCluster but could work fine if the kubeconfig at hand doesn't do any certificate stuff.

  4. KubectlProxy seems to work fine.

No transport is working under nodejs.

For via-kubectl-raw, I think I'm being made to switch from Deno.Command API
to `node:child_process` API in all cases, so giving up the nicer Deno API surface.

For via-kubeconfig, I don't see a good path to do server certificates
under nodejs. I'm just calling fetch() and on nodejs one must use
`import "undici";` to get the certificate trusting logic.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant