NVIDIA / holodeck / 26081398448

push

github

feat(api): add Kubernetes.RemoteAccess for external kubeconfig access (#818)

Adds an opt-in kubeconfig mode for callers outside the cluster's VPC
(e.g., GitHub Actions runners that provisioned the cluster). Without
this, downstream CI repos had to proxy kubectl through ssh + rsync.
With kubernetes.remoteAccess: true, holodeck rewrites the server URL
to the node's public endpoint and chowns the kubeconfig to the
workspace-bind-mount owner so the runner user can read it directly.

Default false preserves the existing in-VM ssh + kubectl flow.
Security group still opens 6443 only to the auto-detected caller
egress IP; file mode stays 0600.

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>

24 of 50 new or added lines in 5 files covered. (48.0%)

5292 of 11066 relevant lines covered (47.82%)

0.53 hits per line