We would like to inform the OCM community that we have integrated the Krkn Operator with Open Cluster Management (OCM) and the Managed Service Account add-on.
Krkn is a CNCF Sandbox chaos engineering project designed to identify weaknesses and improve the resilience of Kubernetes environments. The Krkn Operator provides a centralized interface for configuring, executing, and monitoring chaos scenarios across one or more Kubernetes clusters.
This initiative is mainly driven by the following considerations:
- Centralized chaos testing: OCM is widely adopted in environments where chaos engineering provides significant value. Its hub-and-managed-cluster architecture offers an ideal foundation for running chaos tests from a single central point and executing scenarios simultaneously across multiple managed clusters.
- Secure authentication: OCM acts as the authentication provider for accessing the managed cluster APIs. The integration uses credentials provided through the Managed Service Account add-on, avoiding the need to manually distribute or manage static cluster credentials within the Krkn Operator.
- Continuous compatibility validation: We have verified the integration against the three most recent major OCM versions. Compatibility with these versions is also continuously validated as part of our CI process.
The first release communicates directly with the Kubernetes APIs of the managed clusters by using the credentials provisioned through OCM and the Managed Service Account add-on and we're currently testing the integration in our CI against the last three major releases.
We are actively working on the next release, which will add support for routing this communication through OCM ClusterProxy, further improving connectivity and reducing the need for direct network access between the hub and the managed cluster APIs.
We are opening this issue to make the OCM team aware of the integration and to gather feedback on the current approach and the upcoming ClusterProxy-based implementation.
We would like to inform the OCM community that we have integrated the Krkn Operator with Open Cluster Management (OCM) and the Managed Service Account add-on.
Krkn is a CNCF Sandbox chaos engineering project designed to identify weaknesses and improve the resilience of Kubernetes environments. The Krkn Operator provides a centralized interface for configuring, executing, and monitoring chaos scenarios across one or more Kubernetes clusters.
This initiative is mainly driven by the following considerations:
The first release communicates directly with the Kubernetes APIs of the managed clusters by using the credentials provisioned through OCM and the Managed Service Account add-on and we're currently testing the integration in our CI against the last three major releases.
We are actively working on the next release, which will add support for routing this communication through OCM ClusterProxy, further improving connectivity and reducing the need for direct network access between the hub and the managed cluster APIs.
We are opening this issue to make the OCM team aware of the integration and to gather feedback on the current approach and the upcoming ClusterProxy-based implementation.