Adding kube apiserver parameters for istio that allow TokenRequest
This commit is contained in:
parent
6533ee3b8b
commit
fea6f04c0f
|
|
@ -6,7 +6,7 @@
|
||||||
echo "######################################################################################"
|
echo "######################################################################################"
|
||||||
echo "## Reinit repository"
|
echo "## Reinit repository"
|
||||||
rm -rf kubespray
|
rm -rf kubespray
|
||||||
VERSION=${1:-release-2.14}
|
VERSION=${1:-release-2.15}
|
||||||
git clone --branch $VERSION https://github.com/kubernetes-sigs/kubespray.git
|
git clone --branch $VERSION https://github.com/kubernetes-sigs/kubespray.git
|
||||||
|
|
||||||
echo "######################################################################################"
|
echo "######################################################################################"
|
||||||
|
|
|
||||||
|
|
@ -1,4 +1,11 @@
|
||||||
---
|
---
|
||||||
|
## custom by moritz
|
||||||
|
|
||||||
|
kube_kubeadm_apiserver_extra_args:
|
||||||
|
service-account-issuer: kubernetes.default.svc
|
||||||
|
service-account-signing-key-file: /etc/kubernetes/ssl/sa.key
|
||||||
|
api-audiences: kubernetes.default.svc
|
||||||
|
|
||||||
# Kubernetes configuration dirs and system namespace.
|
# Kubernetes configuration dirs and system namespace.
|
||||||
# Those are where all the additional config stuff goes
|
# Those are where all the additional config stuff goes
|
||||||
# the kubernetes normally puts in /srv/kubernetes.
|
# the kubernetes normally puts in /srv/kubernetes.
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue