Skip to content

feat(miku-kube): add in-cluster service account support#1

Merged
zhubby merged 1 commit into
mainfrom
codex/incluster-service-account
Jun 23, 2026
Merged

feat(miku-kube): add in-cluster service account support#1
zhubby merged 1 commit into
mainfrom
codex/incluster-service-account

Conversation

@zhubby

@zhubby zhubby commented Jun 23, 2026

Copy link
Copy Markdown
Owner

Summary

  • Add automatic in-cluster Kubernetes service account detection when running inside a pod
  • Server startup now tries in-cluster auth first, falls back to default kubeconfig client, then offline mode
  • In-cluster cluster appears in the cluster list with reserved ID miku-in-cluster and cannot be created/shadowed by users
  • Stored clusters that shadow the reserved in-cluster ID are logged and bypassed

Test plan

  • cargo test --workspace — all tests pass including new in-cluster service account tests
  • cargo clippy --workspace --all-targets -- -D warnings — no warnings
  • cargo fmt --all -- --check — formatting verified

🤖 Generated with Claude Code

Add automatic detection and use of in-cluster Kubernetes service account
when running inside a pod. The server now tries in-cluster auth first,
falls back to default kubeconfig client, then offline mode. In-cluster
cluster appears in the cluster list with reserved ID "miku-in-cluster"
and cannot be shadowed by user-created clusters.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@zhubby zhubby merged commit 587c250 into main Jun 23, 2026
2 checks passed
@zhubby zhubby deleted the codex/incluster-service-account branch June 23, 2026 09:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants