moritz
/
infrapuzzle
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Adding kube apiserver parameters for istio that allow TokenRequest

This commit is contained in:
Moritz Graf 2021-01-24 22:12:35 +01:00
parent 6533ee3b8b
commit fea6f04c0f
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bootstrap/init.sh
View File

@ -6,7 +6,7 @@
echo "######################################################################################"
echo "## Reinit repository"
rm -rf kubespray
VERSION=${1:-release-2.14}
VERSION=${1:-release-2.15}
git clone --branch $VERSION https://github.com/kubernetes-sigs/kubespray.git
echo "######################################################################################"

7
bootstrap/inventory/prod/group_vars/k8s-cluster/k8s-cluster.yml
View File

@ -1,4 +1,11 @@
---
## custom by moritz
kube_kubeadm_apiserver_extra_args:
service-account-issuer: kubernetes.default.svc
service-account-signing-key-file: /etc/kubernetes/ssl/sa.key
api-audiences: kubernetes.default.svc
# Kubernetes configuration dirs and system namespace.
# Those are where all the additional config stuff goes
# the kubernetes normally puts in /srv/kubernetes.