forked from k-space/kube
		
	Update README: Cluster access OIDC Client ID
This commit is contained in:
		@@ -24,7 +24,7 @@ patch /etc/kubernetes/manifests/kube-apiserver.yaml - << EOF
 | 
			
		||||
     - --etcd-keyfile=/etc/kubernetes/pki/apiserver-etcd-client.key
 | 
			
		||||
     - --etcd-servers=https://127.0.0.1:2379
 | 
			
		||||
+    - --oidc-issuer-url=https://auth2.k-space.ee/
 | 
			
		||||
+    - --oidc-client-id=kubelogin
 | 
			
		||||
+    - --oidc-client-id=oidc-gateway.kubelogin
 | 
			
		||||
+    - --oidc-username-claim=sub
 | 
			
		||||
+    - --oidc-groups-claim=groups
 | 
			
		||||
     - --kubelet-client-certificate=/etc/kubernetes/pki/apiserver-kubelet-client.crt
 | 
			
		||||
@@ -65,7 +65,7 @@ users:
 | 
			
		||||
      - oidc-login
 | 
			
		||||
      - get-token
 | 
			
		||||
      - --oidc-issuer-url=https://auth2.k-space.ee/
 | 
			
		||||
      - --oidc-client-id=oidc-gateway-kubelogin
 | 
			
		||||
      - --oidc-client-id=oidc-gateway.kubelogin
 | 
			
		||||
      - --oidc-use-pkce
 | 
			
		||||
      - --oidc-extra-scope=profile,email,groups
 | 
			
		||||
      - --listen-address=127.0.0.1:27890
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user