Skip to content
Permalink
Browse files

Merge pull request #7926 from bhegazy/aws-iam-auth-doc

[aws-iam-authenticator] Docs - Steps to disable DaemonSet Temporarily
  • Loading branch information
k8s-ci-robot committed Nov 22, 2019
2 parents 4b11768 + f7f7b6a commit d87fcf164cd973a45d414dd03dc935d5a12694e1
Showing with 2 additions and 0 deletions.
  1. +2 −0 docs/authentication.md
@@ -135,4 +135,6 @@ kubectl get pods -n kube-system | grep aws-iam-authenticator | awk '{print $1}'
* Create an aws-iam-authenticator configMap on the cluster `kubectl apply -f aws-iam-authenticator_example-config.yaml`
* Edit the clusters configuration `kops edit cluster ${NAME}` and add the Authentication and Authorization configs to the YAML config.
* Update the clusters configuration `kops update cluster ${CLUSTER_NAME} --yes`
* Temporarily disable aws-iam-authenticator DaemonSet `kubectl patch daemonset -n kube-system aws-iam-authenticator -p '{"spec": {"template": {"spec": {"nodeSelector": {"disable-aws-iam-authenticator": "true"}}}}}'`
* Perform a rolling update of the masters `kops rolling-update cluster ${CLUSTER_NAME} --instance-group-roles=Master --force --yes`
* Re-enable aws-iam-authenticator DaemonSet `kubectl patch daemonset -n kube-system aws-iam-authenticator --type json -p='[{"op": "remove", "path": "/spec/template/spec/nodeSelector/disable-aws-iam-authenticator"}]'`

0 comments on commit d87fcf1

Please sign in to comment.
You can’t perform that action at this time.