Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AuthToken needed even in non-https mode in 3.2.16 #9349

Closed
sttts opened this issue Feb 23, 2018 · 3 comments
Closed

AuthToken needed even in non-https mode in 3.2.16 #9349

sttts opened this issue Feb 23, 2018 · 3 comments
Assignees

Comments

@sttts
Copy link
Contributor

sttts commented Feb 23, 2018

Compare kubernetes/kubernetes#60299.

Without setting AuthToken in the server config struct, one gets:

utils.go:293: Failed to start etcd server error=failed to initialize the etcd server: auth: invalid auth options

Is this intentional?

@mitake
Copy link
Contributor

mitake commented Feb 23, 2018

@sttts thanks for your report. Probably allowing empty AuthToken would be rationale. How do you think? @xiang90 If it is ok, I'll work on it.

@gyuho
Copy link
Contributor

gyuho commented Feb 25, 2018

@mitake How about default to "simple" in etcdserver.NewServer, rather than implementing no-op TokenProvider with empty token?

@mitake
Copy link
Contributor

mitake commented Feb 27, 2018

@gyuho probably providing a nop auth token provider would be valuable because the stateful nature of simple token provides complexity and the jwt token requires keys for signing and verifying even if it isn't used. The nop token provider will be useful for deployments where CN based authentication is used.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

3 participants