epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2025-12-14 05:45:06 +03:00
Code Issues Packages Projects Releases Wiki Activity

add support for service-account-lookup parameter (#8781)

Browse Source 
* feat: add variable to manage service-account-lookup on kube-apiserver

* docs: add documentation about service-account-lookup variable
This commit is contained in:
Alessio Greggi
2022-05-06 09:39:07 +02:00
committed by GitHub
parent 3e52a0db95
commit e7df4d3dd9
3 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/vars.md
View File

@@ -146,6 +146,8 @@ kube_apiserver_admission_event_rate_limits:
...
```
* *kube_apiserver_service_account_lookup* - Enable validation service account before validating token. Default `true`.
Note, if cloud providers have any use of the ``10.233.0.0/16``, like instances'
private addresses, make sure to pick another values for ``kube_service_addresses``
and ``kube_pods_subnet``, for example from the ``172.18.0.0/16``.