|
@ -119,11 +119,14 @@ kube_webhook_token_auth: false |
|
|
# kube_oidc_url: https:// ... |
|
|
# kube_oidc_url: https:// ... |
|
|
# kube_oidc_client_id: kubernetes |
|
|
# kube_oidc_client_id: kubernetes |
|
|
## Optional settings for OIDC |
|
|
## Optional settings for OIDC |
|
|
# kube_oidc_ca_file: {{ kube_cert_dir }}/ca.pem |
|
|
|
|
|
# kube_oidc_username_claim: sub |
|
|
# kube_oidc_username_claim: sub |
|
|
# kube_oidc_username_prefix: oidc: |
|
|
# kube_oidc_username_prefix: oidc: |
|
|
# kube_oidc_groups_claim: groups |
|
|
# kube_oidc_groups_claim: groups |
|
|
# kube_oidc_groups_prefix: oidc: |
|
|
# kube_oidc_groups_prefix: oidc: |
|
|
|
|
|
# Copy oidc CA file to the following path if needed |
|
|
|
|
|
# kube_oidc_ca_file: {{ kube_cert_dir }}/ca.pem |
|
|
|
|
|
# Optionally include a base64-encoded oidc CA cert |
|
|
|
|
|
# kube_oidc_ca_cert: c3RhY2thYnVzZS5jb20... |
|
|
|
|
|
|
|
|
## Variables for webhook token auth https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication |
|
|
## Variables for webhook token auth https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication |
|
|
# kube_webhook_token_auth_url: https://... |
|
|
# kube_webhook_token_auth_url: https://... |
|
|