External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-10-29 22:03:22 -02:30
Code Issues Packages Projects Releases Wiki Activity

Allow setting --service-account-extend-token-expiration for kube-apiserver in hardening.yaml (#13616)

Browse Source 
* kube-apiserver: add --service-account-extend-token-expiration

* Update docs/ansible/vars.md

Co-authored-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

* Update docs/operations/hardening.md

* Update docs/operations/hardening.md

Co-authored-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

---------

Co-authored-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
This commit is contained in:
Jay.H
2026-10-12 03:57:19 +00:00
committed by GitHub
co-authored by Ali Afsharzadeh
parent 131fd144cc
commit 457217aaa0
4 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/files/ubuntu24-calico-all-in-one-hardening.yml
+1
View File
@@ -15,6 +15,7 @@ enable_nodelocaldns: false
authorization_modes: ["Node", "RBAC"]
kube_apiserver_request_timeout: 120s
kube_apiserver_service_account_lookup: true
kube_apiserver_service_account_extend_token_expiration: false
# enable kubernetes audit
kubernetes_audit: true