C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allows tls verify skip on webhook auth url (#6472)

Browse source
This commit is contained in:
Sulochan Acharya 2020-08-05 13:02:29 +01:00 committed by GitHub
parent 91742055e0
commit bfe143808f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
roles/kubernetes/master/defaults/main/main.yml
View file

@ -119,6 +119,7 @@ kube_basic_auth: false
kube_token_auth: false kube_token_auth: false
kube_oidc_auth: false kube_oidc_auth: false
kube_webhook_token_auth: false kube_webhook_token_auth: false
kube_webhook_token_auth_url_skip_tls_verify: false
## Variables for OpenID Connect Configuration https://kubernetes.io/docs/admin/authentication/ ## Variables for OpenID Connect Configuration https://kubernetes.io/docs/admin/authentication/
## To use OpenID you have to deploy additional an OpenID Provider (e.g Dex, Keycloak, ...) ## To use OpenID you have to deploy additional an OpenID Provider (e.g Dex, Keycloak, ...)

1
roles/kubernetes/master/templates/webhook-token-auth-config.yaml.j2
View file

@ -3,6 +3,7 @@ clusters:
- name: webhook-token-auth-cluster - name: webhook-token-auth-cluster
cluster: cluster:
server: {{ kube_webhook_token_auth_url }} server: {{ kube_webhook_token_auth_url }}
insecure-skip-tls-verify: {{ kube_webhook_token_auth_url_skip_tls_verify }}
# users refers to the API server's webhook configuration. # users refers to the API server's webhook configuration.
users: users: