mirrors
/
kubernetes-the-hard-way
mirror of https://github.com/kelseyhightower/kubernetes-the-hard-way
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Remove ability for anonymous authentication 

Add --anonymous-auth=false \\
As the default allows anonymous authentication
--anonymous-auth     Default: true
Enables anonymous requests to the secure port of the API server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.
pull/615/head
arcreigh 2020-11-03 10:35:55 -05:00 committed by GitHub
parent ca96371e4d
commit 460efa6990
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
docs/08-bootstrapping-kubernetes-controllers.md
View File

@ -74,6 +74,7 @@ Documentation=https://github.com/kubernetes/kubernetes
ExecStart=/usr/local/bin/kube-apiserver \\ ExecStart=/usr/local/bin/kube-apiserver \\
--advertise-address=${INTERNAL_IP} \\ --advertise-address=${INTERNAL_IP} \\
--allow-privileged=true \\ --allow-privileged=true \\
--anonymous-auth=false \\
--apiserver-count=3 \\ --apiserver-count=3 \\
--audit-log-maxage=30 \\ --audit-log-maxage=30 \\
--audit-log-maxbackup=3 \\ --audit-log-maxbackup=3 \\