scl/kubespray
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #2898 from kubernetes-incubator/default_true_authtoken

Browse Source 
Enable by default the kubelet token auth
This commit is contained in:
Andreas Krüger
2018-06-19 09:56:32 +02:00
committed by GitHub
parent cfd51b1ac7 c192a01b20
commit 236d1a448d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/kubespray-defaults/defaults/main.yaml
View File

@ -210,7 +210,7 @@ authorization_modes: ['Node', 'RBAC']
rbac_enabled: "{{ 'RBAC' in authorization_modes or kubeadm_enabled }}"
# When enabled, API bearer tokens (including service account tokens) can be used to authenticate to the kubelet’s HTTPS endpoint
kubelet_authentication_token_webhook: false
kubelet_authentication_token_webhook: true
# When enabled, access to the kubelet API requires authorization by delegation to the API server
kubelet_authorization_mode_webhook: false