easzlab
/
kubeasz
mirror of https://github.com/easzlab/kubeasz.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix x509: subject with cn=system:node: is not in the allowed list: [aggregator]

pull/245/head
gjmzj 2018-07-02 12:27:19 +08:00
parent e23975da0c
commit 4f82c79fa2
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/kube-master/templates/kube-apiserver-v1.8.service.j2
View File

@ -35,7 +35,7 @@ ExecStart={{ bin_dir }}/kube-apiserver \
--audit-log-path=/var/lib/audit.log \ --audit-log-path=/var/lib/audit.log \
--event-ttl=1h \ --event-ttl=1h \
--requestheader-client-ca-file={{ ca_dir }}/ca.pem \ --requestheader-client-ca-file={{ ca_dir }}/ca.pem \
--requestheader-allowed-names=aggregator \ --requestheader-allowed-names='' \
--requestheader-extra-headers-prefix=X-Remote-Extra- \ --requestheader-extra-headers-prefix=X-Remote-Extra- \
--requestheader-group-headers=X-Remote-Group \ --requestheader-group-headers=X-Remote-Group \
--requestheader-username-headers=X-Remote-User \ --requestheader-username-headers=X-Remote-User \

2
roles/kube-master/templates/kube-apiserver.service.j2
View File

@ -35,7 +35,7 @@ ExecStart={{ bin_dir }}/kube-apiserver \
--audit-log-path=/var/lib/audit.log \ --audit-log-path=/var/lib/audit.log \
--event-ttl=1h \ --event-ttl=1h \
--requestheader-client-ca-file={{ ca_dir }}/ca.pem \ --requestheader-client-ca-file={{ ca_dir }}/ca.pem \
--requestheader-allowed-names=aggregator \ --requestheader-allowed-names='' \
--requestheader-extra-headers-prefix=X-Remote-Extra- \ --requestheader-extra-headers-prefix=X-Remote-Extra- \
--requestheader-group-headers=X-Remote-Group \ --requestheader-group-headers=X-Remote-Group \
--requestheader-username-headers=X-Remote-User \ --requestheader-username-headers=X-Remote-User \