Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow to set kube_api_anonymous_auth to false #2761

Closed
wants to merge 2 commits into from
Closed

Allow to set kube_api_anonymous_auth to false #2761

wants to merge 2 commits into from

Conversation

woopstar
Copy link
Member

Allow to disable kube_api_anonymous_auth while also disabling kube_apiserver_insecure_port.

To allow this, you need to enable Webhook in authorization_modes and our verify settings must allow it too.

Configuration would be:

kube_api_anonymous_auth: false
kube_apiserver_insecure_port: 0
authorization_modes: ['Node', 'RBAC', 'Webhook']

@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels May 11, 2018
@woopstar
Copy link
Member Author

Following needs to be fixed first: kubernetes/kubeadm#732

@woopstar woopstar closed this Aug 30, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@woopstar @k8s-ci-robot