epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-28 09:39:12 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix OpenId Connect example prefixes (#7527)

Browse Source 
Fixes "mapping values are not allowed in this context
This commit is contained in:
Mathieu Parent
2021-04-21 02:32:10 +02:00
committed by GitHub
parent 1e7d48846a
commit e39e3d5c26
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
inventory/sample/group_vars/k8s-cluster/k8s-cluster.yml
View File

@@ -48,9 +48,9 @@ credentials_dir: "{{ inventory_dir }}/credentials"
## Optional settings for OIDC ## Optional settings for OIDC
# kube_oidc_ca_file: "{{ kube_cert_dir }}/ca.pem" # kube_oidc_ca_file: "{{ kube_cert_dir }}/ca.pem"
# kube_oidc_username_claim: sub # kube_oidc_username_claim: sub
# kube_oidc_username_prefix: oidc: # kube_oidc_username_prefix: 'oidc:'
# kube_oidc_groups_claim: groups # kube_oidc_groups_claim: groups
# kube_oidc_groups_prefix: oidc: # kube_oidc_groups_prefix: 'oidc:'
## Variables to control webhook authn/authz ## Variables to control webhook authn/authz
# kube_webhook_token_auth: false # kube_webhook_token_auth: false

4
roles/kubernetes/control-plane/defaults/main/main.yml
View File

@@ -116,9 +116,9 @@ kube_webhook_authorization_url_skip_tls_verify: false
# kube_oidc_client_id: kubernetes # kube_oidc_client_id: kubernetes
## Optional settings for OIDC ## Optional settings for OIDC
# kube_oidc_username_claim: sub # kube_oidc_username_claim: sub
# kube_oidc_username_prefix: oidc: # kube_oidc_username_prefix: 'oidc:'
# kube_oidc_groups_claim: groups # kube_oidc_groups_claim: groups
# kube_oidc_groups_prefix: oidc: # kube_oidc_groups_prefix: 'oidc:'
# Copy oidc CA file to the following path if needed # Copy oidc CA file to the following path if needed
# kube_oidc_ca_file: {{ kube_cert_dir }}/ca.pem # kube_oidc_ca_file: {{ kube_cert_dir }}/ca.pem
# Optionally include a base64-encoded oidc CA cert # Optionally include a base64-encoded oidc CA cert