From ef58242114e81e6b7a46c16f4f644dd4bd4fa91d Mon Sep 17 00:00:00 2001 From: Raj Perera Date: Tue, 20 Jun 2017 13:31:44 -0400 Subject: [PATCH] Add note about auth modes --- docs/vars.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/vars.md b/docs/vars.md index 3756610fa..7608af347 100644 --- a/docs/vars.md +++ b/docs/vars.md @@ -67,7 +67,10 @@ following default cluster paramters: OpenStack (default is unset) * *kube_hostpath_dynamic_provisioner* - Required for use of PetSets type in Kubernetes -* *authorization_mode* - A list of authorization modes that the apiserver should be configured. +* *authorization_mode* - A list of [authorization modes]( +https://kubernetes.io/docs/admin/authorization/#using-flags-for-your-authorization-module) + that the cluster should be configured for. Defaults to `['AlwaysAllow']`. + Note: Only `AlwaysAllow`, `AlwaysDeny` and `RBAC` are tested. Note, if cloud providers have any use of the ``10.233.0.0/16``, like instances' private addresses, make sure to pick another values for ``kube_service_addresses``