External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-10-31 06:26:19 -02:30
Code Issues Packages Projects Releases Wiki Activity

Allow setting --service-account-extend-token-expiration for kube-apiserver in hardening.yaml (#13616)

Browse Source 
* kube-apiserver: add --service-account-extend-token-expiration

* Update docs/ansible/vars.md

Co-authored-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

* Update docs/operations/hardening.md

* Update docs/operations/hardening.md

Co-authored-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

---------

Co-authored-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
This commit is contained in:
Jay.H
2026-10-12 03:57:19 +00:00
committed by GitHub
co-authored by Ali Afsharzadeh
parent 131fd144cc
commit 457217aaa0
4 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/kubernetes/control-plane/templates/kubeadm-config.v1beta4.yaml.j2
+4
View File
@@ -178,6 +178,10 @@ apiServer:
- name: service-account-lookup
value: "{{ kube_apiserver_service_account_lookup }}"
{% endif %}
{% if kube_apiserver_service_account_extend_token_expiration is defined %}
- name: service-account-extend-token-expiration
value: "{{ kube_apiserver_service_account_extend_token_expiration }}"
{% endif %}
{% if kube_oidc_auth and kube_oidc_url is defined and kube_oidc_client_id is defined and not kube_apiserver_use_authentication_config_file %}
- name: oidc-issuer-url
value: "{{ kube_oidc_url }}"