-
Notifications
You must be signed in to change notification settings - Fork 14.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
add doc for new flag experimental-keystone-ca-file #1620
add doc for new flag experimental-keystone-ca-file #1620
Conversation
Since this was sent, the 1.5 branch has been cut. So, this needs to be cherry picked to release-1.5 as well. |
d333620
to
9b7f7f3
Compare
@@ -367,6 +367,12 @@ option to the API server during startup. The plugin is implemented in | |||
`plugin/pkg/auth/authenticator/password/keystone/keystone.go` and currently uses | |||
basic auth to verify used by username and password. | |||
|
|||
If you have configured self-signed certificates for Keystone server, | |||
`--experimental-keystone-ca-file=SOMEFIlE` option may be needed during the startup |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
"If you have configured self-signed certificates for the Keystone server, you may need to set the --experimental-keystone-ca-file=SOMEFILEoption when starting the Kubernetes API server. If you set the option, the Keystone server's certificate is verified by one of the authorities in the
experimental-keystone-ca-file`. Otherwise, the certificate is verified by the host's root Certificate Authority."
Some feedback on wording, for clarity and avoiding run-on sentences. |
9b7f7f3
to
b8d8c1b
Compare
@devin-donnelly I've already fixed that. Thanks for your review. |
add doc for this new flag.
This change is