mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-02-20 04:30:10 -03:30
Use a generated password for kube user (#1624)
Removed unnecessary root user
This commit is contained in:
@@ -40,18 +40,11 @@ kube_log_level: 2
|
||||
|
||||
# Users to create for basic auth in Kubernetes API via HTTP
|
||||
# Optionally add groups for user
|
||||
kube_api_pwd: "changeme"
|
||||
kube_api_pwd: "{{ lookup('password', 'credentials/kube_user length=15') }}"
|
||||
kube_users:
|
||||
kube:
|
||||
pass: "{{kube_api_pwd}}"
|
||||
role: admin
|
||||
root:
|
||||
pass: "{{kube_api_pwd}}"
|
||||
role: admin
|
||||
# groups:
|
||||
# - system:masters
|
||||
|
||||
|
||||
|
||||
## It is possible to activate / deactivate selected authentication methods (basic auth, static token auth)
|
||||
#kube_oidc_auth: false
|
||||
|
||||
Reference in New Issue
Block a user