External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-01 01:28:11 -03:30
Code Issues Packages Projects Releases Wiki Activity

Allow webhook authorization (#6502)

Browse Source
This commit is contained in:
Sulochan Acharya
2020-08-24 14:29:41 +01:00
committed by GitHub
parent 0c80d3d9fa
commit 36924b63dc
5 changed files with 48 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
inventory/sample/group_vars/k8s-cluster/k8s-cluster.yml
View File

@@ -69,6 +69,15 @@ kube_users:
# kube_oidc_groups_claim: groups
# kube_oidc_groups_prefix: oidc:
## Variables to control webhook authn/authz
# kube_webhook_token_auth: false
# kube_webhook_token_auth_url: https://...
# kube_webhook_token_auth_url_skip_tls_verify: false
## For webhook authorization, authorization_modes must include Webhook
# kube_webhook_authorization: false
# kube_webhook_authorization_url: https://...
# kube_webhook_authorization_url_skip_tls_verify: false
# Choose network plugin (cilium, calico, contiv, weave or flannel. Use cni for generic cni plugin)
# Can also be set to 'cloud', which lets the cloud provider setup appropriate routing