Skip to content

API Access — MetaKube

You can use MetaKube via its HTTP JSON API, or its Terraform Provider. You can view a simple Terraform example here.

OpenAPI Specs

Service Account Required

To use the API, please first create a Service Account. Then use the Service Account as a bearer token, s.t. Authorization: Bearer <api-key> in the header of your requests.

MetaKube OpenAPI Spec

Example: Using the HTTP JSON API

Here's an example of how to use the Service Account with a curl command to access the MetaKube API:

curl -X 'GET' \
  'https://metakube.syseleven.de/api/v2/projects/<project-id>/clusters' \
  -H 'accept: application/json' \
  -H 'authorization: Bearer s11_prak_<uuid>_<secret>'

Replace <project-id> with your actual project ID and s11_prak_<uuid>_<secret> with your generated Service Account credentials and make sure that the Service Account has the necessary permissions to access the resources you need.

Cluster Access — MetaKube

BETA

You need to enable the enable MetaKube OIDC support before you can use this feature. The feature is currently in BETA state and subject to further changes.

You can use your SysEleven login to access Metakube clusters via OIDC. Follow the steps below to configure this.

  1. Ensure that you have installed the kubelogin plugin for kubectl.
  2. Head to your cluster details page and click on the Access Control tab.
  3. Click on the ENABLE button.
  4. Configure user roles under Cluster Access. Users are identified by their email address.

Cluster Access

Info

OIDC authentication against Metakube clusters is currently only supported for user accounts. We're planning the following enhancements to this feature:

  • Support for SysEleven IAM service accounts
  • Transparent translation of SysEleven IAM teams to Kubernetes groups

Alternatively, you can download the admin config using the DOWNLOAD KUBECONFIG (ADMIN) button.