epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-08 02:58:29 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1080 from VincentS/Granular_Auth_Control

Browse Source 
Granular authentication Control
This commit is contained in:
Matthew Mosesohn
2017-03-15 13:12:51 +03:00
committed by GitHub
parent a62a444229 026da060f2
commit 4354162067
5 changed files with 21 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
roles/kubernetes/master/defaults/main.yml
View File

@@ -33,9 +33,15 @@ kube_apiserver_cpu_limit: 800m
kube_apiserver_memory_requests: 256M
kube_apiserver_cpu_requests: 300m
## Enable/Disable Kube API Server Authentication Methods
kube_basic_auth: true
kube_token_auth: true
kube_oidc_auth: false
## Variables for OpenID Connect Configuration https://kubernetes.io/docs/admin/authentication/
## To use OpenID you have to deploy additional an OpenID Provider (e.g Dex, Keycloak, ...)
kube_oidc_auth: false
#kube_oidc_url: https:// ...
# kube_oidc_client_id: kubernetes
## Optional settings for OIDC