Adding kube apiserver parameters for istio that allow TokenRequest

2021-01-24 22:12:35 +01:00
parent 6533ee3b8b
commit fea6f04c0f
2 changed files with 8 additions and 1 deletions
@@ -1,4 +1,11 @@
 ---
+## custom by moritz
+
+kube_kubeadm_apiserver_extra_args:
+  service-account-issuer: kubernetes.default.svc
+  service-account-signing-key-file: /etc/kubernetes/ssl/sa.key
+  api-audiences: kubernetes.default.svc
+
 # Kubernetes configuration dirs and system namespace.
 # Those are where all the additional config stuff goes
 # the kubernetes normally puts in /srv/kubernetes.