whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Refer ServiceAccountTokenVolumeProjection documentation instead of providing incorrect instructions.

Browse Source 
Since Kubernetes v1.20 it is enabled by default.
This commit is contained in:
Andrei Kvapil
2021-11-08 11:41:17 +01:00
parent 8453f2e116
commit 69c6dc0a82
1 changed files with 2 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/tasks/extend-kubernetes/setup-konnectivity.md
+2 -9
View File
@@ -25,15 +25,8 @@ You need to configure the API Server to use the Konnectivity service
and direct the network traffic to the cluster nodes: and direct the network traffic to the cluster nodes:
1. Make sure that 1. Make sure that
the `ServiceAccountTokenVolumeProjection` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) [Service Account Token Volume Projection](/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection)
is enabled. You can enable feature enabled in your cluster. It is enabled by default since Kubernetes v1.20.
[service account token volume protection](/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection)
by providing the following flags to the kube-apiserver:
```
--service-account-issuer=api
--service-account-signing-key-file=/etc/kubernetes/pki/sa.key
--api-audiences=system:konnectivity-server
```
1. Create an egress configuration file such as `admin/konnectivity/egress-selector-configuration.yaml`. 1. Create an egress configuration file such as `admin/konnectivity/egress-selector-configuration.yaml`.
1. Set the `--egress-selector-config-file` flag of the API Server to the path of 1. Set the `--egress-selector-config-file` flag of the API Server to the path of
your API Server egress configuration file. your API Server egress configuration file.