Adding kube apiserver parameters for istio that allow TokenRequest

This commit is contained in:
Moritz Graf 2021-01-24 22:12:35 +01:00
parent 6533ee3b8b
commit fea6f04c0f
2 changed files with 8 additions and 1 deletions

View File

@ -6,7 +6,7 @@
echo "######################################################################################" echo "######################################################################################"
echo "## Reinit repository" echo "## Reinit repository"
rm -rf kubespray rm -rf kubespray
VERSION=${1:-release-2.14} VERSION=${1:-release-2.15}
git clone --branch $VERSION https://github.com/kubernetes-sigs/kubespray.git git clone --branch $VERSION https://github.com/kubernetes-sigs/kubespray.git
echo "######################################################################################" echo "######################################################################################"

View File

@ -1,4 +1,11 @@
--- ---
## custom by moritz
kube_kubeadm_apiserver_extra_args:
service-account-issuer: kubernetes.default.svc
service-account-signing-key-file: /etc/kubernetes/ssl/sa.key
api-audiences: kubernetes.default.svc
# Kubernetes configuration dirs and system namespace. # Kubernetes configuration dirs and system namespace.
# Those are where all the additional config stuff goes # Those are where all the additional config stuff goes
# the kubernetes normally puts in /srv/kubernetes. # the kubernetes normally puts in /srv/kubernetes.