Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow additional configuration of API Server #47

Merged
merged 1 commit into from
Jan 29, 2018

Conversation

Zetten
Copy link
Contributor

@Zetten Zetten commented Jan 25, 2018

No description provided.

@scotty-c
Copy link
Contributor

@Zetten The code looks good. Can you give me an example of what you would add as an extra param.
I will update the readme and changelog after the merge

@Zetten
Copy link
Contributor Author

Zetten commented Jan 29, 2018

The driver for this in our environment was integration of an authentication provider, in our case Dex. Hooking this up so that users can get and use bearer tokens with kubectl requires extra API Server parameters.

Configuring puppetlabs-kubernetes (using hiera) to connect with Dex looks like:

kubernetes::apiserver_extra_arguments:
  - --oidc-issuer-url=https://dex.example.com:32000
  - --oidc-client-id=example-app
  - --oidc-ca-file=/etc/kubernetes/ssl/openid-ca.pem
  - --oidc-username-claim=email
  - --oidc-groups-claim=groups

@scotty-c
Copy link
Contributor

scotty-c commented Jan 29, 2018

@Zetten Perfect, thanks heaps for your contribution

@scotty-c scotty-c merged commit 10b6024 into puppetlabs:master Jan 29, 2018
lionce pushed a commit to lionce/puppetlabs-kubernetes that referenced this pull request Dec 19, 2019
(maint) Refactor of code to match rubocop standards
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants