TL;DR: "OCM Cluster-Gateway Manager" addon installs an operator component into the hub cluster that help the administrator to easily operate the configuration of cluster-gateway instances via "ClusterGatewayConfiguration" custom resource. WARNING this addon will restart the cluster-gateway instances upon the first-time installation.
Basically it helps us to sustainably operate the cluster-gateway instances from the following aspects:
- Automatic cluster-gateway's server TLS certificate rotation.
- Automatic cluster discovery.
- Structurize the component configuration for cluster-gateway.
- Manages the "egress identity" for cluster-gateway to access each clusters.
Note that the requests proxied by cluster-gateway will use the identity of
open-cluster-management-managed-serviceaccount/cluster-gateway to access
the managed clusters, and by default w/ cluster-admin permission, so please
be mindful of that.
Run the following commands to check the healthiness of the addons:
In case you have too many clusters to browse at a time, install the command-line binary via:
Then run the following commands to see the details of the addon:
You can read or edit the overall configuration of cluster-gateway deployments via the following command: