Skip to content

feat(sks): add Karpenter credential rotation and active nodepool template lookupJbruinink/sks karpenter rotation nodepool templates#797

Merged
natalie-o-perret merged 2 commits intoexoscale:masterfrom
jbruinink:jbruinink/sks-karpenter-rotation-nodepool-templates
Feb 24, 2026
Merged

feat(sks): add Karpenter credential rotation and active nodepool template lookupJbruinink/sks karpenter rotation nodepool templates#797
natalie-o-perret merged 2 commits intoexoscale:masterfrom
jbruinink:jbruinink/sks-karpenter-rotation-nodepool-templates

Conversation

@jbruinink
Copy link
Contributor

Description

sks: add Karpenter credential rotation and active nodepool template lookup.

This PR adds two new SKS CLI commands:

  • exo compute sks rotate-karpenter-credentials <CLUSTER-NAME|ID> [-z ZONE]
  • exo compute sks active-nodepool-templates <KUBERNETES-VERSION> [--variant standard|nvidia] [-z ZONE]

Details:

  • rotate-karpenter-credentials mirrors existing SKS credential rotation commands (CCM/CSI), triggers the SKS API rotation operation, and waits for operation success.
  • active-nodepool-templates queries active SKS nodepool templates for a Kubernetes version and returns both template ID and resolved template name.
  • By default, active-nodepool-templates queries both standard and nvidia variants; --variant limits lookup to one variant.
  • Both commands are registered under exo compute sks and appear in help output.

Checklist

(For exoscale contributors)

  • Changelog updated (under Unreleased block)
  • Testing

Testing

  • go test ./cmd/compute/sks
  • go run . compute sks --help
    • verified active-nodepool-templates and rotate-karpenter-credentials are listed
  • Manual validation:
    • deleted the SKS Karpenter IAM key for a test cluster
    • verified the nodepool was not longer Ready
    • rotated credentials via rotate-karpenter-credentials
    • verified a new Karpenter key was issued
    • verified the nodepool returned to Ready

@jbruinink jbruinink force-pushed the jbruinink/sks-karpenter-rotation-nodepool-templates branch from 69c1814 to 656b055 Compare February 20, 2026 16:22
@jbruinink jbruinink force-pushed the jbruinink/sks-karpenter-rotation-nodepool-templates branch from 656b055 to 08e3870 Compare February 20, 2026 16:23
@pierre-emmanuelJ pierre-emmanuelJ requested review from a team February 23, 2026 10:07
@nerzhul
Copy link
Contributor

nerzhul commented Feb 23, 2026

Hello @jbruinink
Thanks for your contribution. Can you show us an example of the active-nodepool-templates, please ?

@jbruinink
Copy link
Contributor Author

Hello @jbruinink Thanks for your contribution. Can you show us an example of the active-nodepool-templates, please ?

absolutely:

exo --output-format json compute sks active-nodepool-templates 1.35.0 -z at-vie-2 --variant standard

[{"kube_version":"1.35.0","variant":"standard","template_id":"b458df8c-30b5-4b94-82cf-dd377bcbe826","template":"sks-node-1.35.0-standard"}]

and

exo compute sks active-nodepool-templates 1.35.0 -z at-vie-2 

┼──────────────┼──────────┼──────────────────────────────────────┼──────────────────────────┼
│ KUBE VERSION │ VARIANT  │             TEMPLATE ID              │         TEMPLATE         │
┼──────────────┼──────────┼──────────────────────────────────────┼──────────────────────────┼
│ 1.35.0       │ standard │ b458df8c-30b5-4b94-82cf-dd377bcbe826 │ sks-node-1.35.0-standard │
│ 1.35.0       │ nvidia   │ 5c7e3e5a-0159-46d8-81d0-685fa817c01c │ sks-node-1.35.0-nvidia   │
┼──────────────┼──────────┼──────────────────────────────────────┼──────────────────────────┼

Copy link
Member

@PhilippeChepy PhilippeChepy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the contribution!

Copy link
Member

@pierre-emmanuelJ pierre-emmanuelJ left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Other than the @natalie-o-perret suggestion for the changelog that I agree with,
LGTM. Thanks for the contribution!

Copy link
Member

@zyegfryed zyegfryed left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you very much for the integration work 🚀

@natalie-o-perret natalie-o-perret merged commit dcda009 into exoscale:master Feb 24, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants