Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
  • Loading branch information
olemarkus and hakman committed Jan 11, 2021
1 parent 991798e commit 9632bf0
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions docs/node_authorization.md
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
### **Node Authorization Service**

**The node authorization service is deprecated.**
In kOps 1.19 using Kubernetes 1.19 kOps will, on AWS, ignore the `nodeAuthorization` field of the cluster spec and
As of kOps 1.19 with AWS and Kubernetes 1.19, the `nodeAuthorization` field of the cluster spec will be ignored and
worker nodes will obtain client certificates for kubelet and other purposes through kops-controller.

In kOps 1.20, setting `nodeAuthorization` is forbidden on any Kubernetes version and you will have to upgrade to kubernetes 1.19+ to retain this feature.
As of kOps 1.20, setting `nodeAuthorization` is forbidden for any Kubernetes version and is replaced by the bootstrapping using kops-controller.

The [node authorization service] is an experimental service which in the absence of a kops-apiserver provides the distribution of tokens to the worker nodes. Bootstrap tokens provide worker nodes a short-time credential to request access kubeconfig certificate. A gist of the flow is;

Expand Down

0 comments on commit 9632bf0

Please sign in to comment.