epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-09 19:58:07 +03:00
Code Issues Packages Projects Releases Wiki Activity

Adds support for webhook token auth. (#3939)

Browse Source 
Webhook token auth:
https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication

Fixes #3063.
This commit is contained in:
Seongjin Cho
2018-12-26 18:52:53 +09:00
committed by Kubernetes Prow Robot
parent 100d972cea
commit 16715adfa0
7 changed files with 63 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
roles/kubernetes/master/defaults/main.yml
View File

@@ -100,6 +100,7 @@ kube_api_runtime_config:
kube_basic_auth: false
kube_token_auth: false
kube_oidc_auth: false
kube_webhook_token_auth: false
## Variables for OpenID Connect Configuration https://kubernetes.io/docs/admin/authentication/
## To use OpenID you have to deploy additional an OpenID Provider (e.g Dex, Keycloak, ...)
@@ -113,6 +114,9 @@ kube_oidc_auth: false
# kube_oidc_groups_claim: groups
# kube_oidc_groups_prefix: oidc:
## Variables for webhook token auth https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
# kube_webhook_token_auth_url: https://...
## Variables for custom flags
apiserver_custom_flags: []