From 45551e8cba081a8da661a26c22ab6a9af856ad5b Mon Sep 17 00:00:00 2001 From: Monis Khan Date: Fri, 13 Mar 2020 15:32:56 -0400 Subject: [PATCH] Remove support for basic authentication Signed-off-by: Monis Khan --- .../access-authn-authz/authentication.md | 20 ------------------- 1 file changed, 20 deletions(-) diff --git a/content/en/docs/reference/access-authn-authz/authentication.md b/content/en/docs/reference/access-authn-authz/authentication.md index b240fb4e22..8ab609a0cc 100644 --- a/content/en/docs/reference/access-authn-authz/authentication.md +++ b/content/en/docs/reference/access-authn-authz/authentication.md @@ -153,26 +153,6 @@ Please see [Bootstrap Tokens](/docs/reference/access-authn-authz/bootstrap-token documentation on the Bootstrap Token authenticator and controllers along with how to manage these tokens with `kubeadm`. -### Static Password File - -Basic authentication is enabled by passing the `--basic-auth-file=SOMEFILE` -option to API server. Currently, the basic auth credentials last indefinitely, -and the password cannot be changed without restarting API server. Note that basic -authentication is currently supported for convenience while we finish making the -more secure modes described above easier to use. - -The basic auth file is a csv file with a minimum of 3 columns: password, user name, user id. -In Kubernetes version 1.6 and later, you can specify an optional fourth column containing -comma-separated group names. If you have more than one group, you must enclose the fourth -column value in double quotes ("). See the following example: - -```conf -password,user,uid,"group1,group2,group3" -``` - -When using basic authentication from an http client, the API server expects an `Authorization` header -with a value of `Basic BASE64ENCODED(USER:PASSWORD)`. - ### Service Account Tokens A service account is an automatically enabled authenticator that uses signed