C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix OpenId Connect example prefixes (#7527)

Browse source 
Fixes "mapping values are not allowed in this context
This commit is contained in:
Mathieu Parent 2021-04-21 02:32:10 +02:00 committed by GitHub
parent 1e7d48846a
commit e39e3d5c26
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
inventory/sample/group_vars/k8s-cluster/k8s-cluster.yml
View file

@ -48,9 +48,9 @@ credentials_dir: "{{ inventory_dir }}/credentials"
## Optional settings for OIDC ## Optional settings for OIDC
# kube_oidc_ca_file: "{{ kube_cert_dir }}/ca.pem" # kube_oidc_ca_file: "{{ kube_cert_dir }}/ca.pem"
# kube_oidc_username_claim: sub # kube_oidc_username_claim: sub
# kube_oidc_username_prefix: oidc: # kube_oidc_username_prefix: 'oidc:'
# kube_oidc_groups_claim: groups # kube_oidc_groups_claim: groups
# kube_oidc_groups_prefix: oidc: # kube_oidc_groups_prefix: 'oidc:'
## Variables to control webhook authn/authz ## Variables to control webhook authn/authz
# kube_webhook_token_auth: false # kube_webhook_token_auth: false

4
roles/kubernetes/control-plane/defaults/main/main.yml
View file

@ -116,9 +116,9 @@ kube_webhook_authorization_url_skip_tls_verify: false
# kube_oidc_client_id: kubernetes # kube_oidc_client_id: kubernetes
## Optional settings for OIDC ## Optional settings for OIDC
# kube_oidc_username_claim: sub # kube_oidc_username_claim: sub
# kube_oidc_username_prefix: oidc: # kube_oidc_username_prefix: 'oidc:'
# kube_oidc_groups_claim: groups # kube_oidc_groups_claim: groups
# kube_oidc_groups_prefix: oidc: # kube_oidc_groups_prefix: 'oidc:'
# Copy oidc CA file to the following path if needed # Copy oidc CA file to the following path if needed
# kube_oidc_ca_file: {{ kube_cert_dir }}/ca.pem # kube_oidc_ca_file: {{ kube_cert_dir }}/ca.pem
# Optionally include a base64-encoded oidc CA cert # Optionally include a base64-encoded oidc CA cert