blob: 2f21e004fa12a77354415cb68b76c1cf405fa5fb (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
# `krane`
<img src="../../images/crane.png" width="40%">
This tool is a variant of the [`crane`](../crane/README.md) command, but builds in
support for authenticating against registries using common credential helpers
that find credentials from the environment.
In particular this tool supports authenticating with common "workload identity"
mechanisms on platforms such as GKE and EKS.
This additional keychain logic only kicks in if alternative authentication
mechanisms have NOT been configured and `crane` would otherwise perform the
command without credentials, so **it is a drop-in replacement for `crane` that
adds support for authenticating with cloud workload identity mechanisms**.
|
