Feature Request: Support exec Authentication (client-go Credential Plugins)

[cjmateos]

Hello,

Currently, when you try to make a deploy over AWS EKS, you get an error like this for each k8s resource:

configmaps is forbidden: User "system:anonymous" cannot create configmaps in the namespace "kube-system"

This is caused because the provider doesn't support exec auth provider.

go-client, since v8.0.0 adds support for it. However, this terraform provider is currently using v6.0.0.
kubernetes/client-go@19c591b

Then, now is not possible to use Terraform in EKS. It would be nice to add this feature.

References

In the official provider repository there is an issue about this:
hashicorp#161

Thanks!

[stigok]

I have blogged about a fix for this

[rpatrick00]

Can you please look at integrating the changes for terraform-providers#162 from the official provider repository? Based on what I have read, it seems like this will address this issue...

[rpatrick00]

I have tested the latest changes from the official repository and exec authentication is working perfectly.

One thing to note is that their implementation of Deployment uses a slightly different configuration data structure. Be careful though since they have broken things by introducing validation on annotations that fail when using annotations whose names have kubernetes.io in them...