Skip to content

K
k3s
Commit 65cc0028 authored by Mike Danese's avatar Mike Danese
Browse files
Options

gce: don't add kubelet bearer token to known tokens

since it is no longer used after kubelet TLS bootstrap.
parent 4103f40f
Hide whitespace changes
Inline Side-by-side
Showing with 0 additions and 3 deletions
cluster/gce/gci/configure-helper.sh
View file @ 65cc0028
......@@ -366,9 +366,6 @@ function create-master-auth {
if [[ -n "${KUBE_SCHEDULER_TOKEN:-}" ]]; then
append_or_replace_prefixed_line "${known_tokens_csv}" "${KUBE_SCHEDULER_TOKEN}," "system:kube-scheduler,uid:system:kube-scheduler"
fi
if [[ -n "${KUBELET_TOKEN:-}" ]]; then
append_or_replace_prefixed_line "${known_tokens_csv}" "${KUBELET_TOKEN}," "kubelet,uid:kubelet,system:nodes"
fi
if [[ -n "${KUBE_PROXY_TOKEN:-}" ]]; then
append_or_replace_prefixed_line "${known_tokens_csv}" "${KUBE_PROXY_TOKEN}," "system:kube-proxy,uid:kube_proxy"
fi
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment