Skip to content

K
k3s
Commit 23d02c8f authored by Mike Danese's avatar Mike Danese
Browse files
Options

enable token auth for kubelets in GCE

parent 666b6b9e
Hide whitespace changes
Inline Side-by-side
Showing with 4 additions and 1 deletion
cluster/gce/util.sh
View file @ 23d02c8f
...@@ -571,8 +571,11 @@ function construct-kubelet-flags { ...@@ -571,8 +571,11 @@ function construct-kubelet-flags {
[[ "${HAIRPIN_MODE:-}" == "none" ]]; then [[ "${HAIRPIN_MODE:-}" == "none" ]]; then
flags+=" --hairpin-mode=${HAIRPIN_MODE}" flags+=" --hairpin-mode=${HAIRPIN_MODE}"
fi fi
flags+=" --anonymous-auth=false"
flags+=" --authentication-token-webhook"
flags+=" --authorization-mode=Webhook"
# Keep client-ca-file in sync with CA_CERT_BUNDLE_PATH in configure-helper.sh # Keep client-ca-file in sync with CA_CERT_BUNDLE_PATH in configure-helper.sh
flags+=" --anonymous-auth=false --authorization-mode=Webhook --client-ca-file=/etc/srv/kubernetes/pki/ca-certificates.crt" flags+=" --client-ca-file=/etc/srv/kubernetes/pki/ca-certificates.crt"
fi fi
# Network plugin # Network plugin
if [[ -n "${NETWORK_PROVIDER:-}" || -n "${NETWORK_POLICY_PROVIDER:-}" ]]; then if [[ -n "${NETWORK_PROVIDER:-}" || -n "${NETWORK_POLICY_PROVIDER:-}" ]]; then
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment