From acd153e60c42283781a384f4527ae3421f9fe6f0 Mon Sep 17 00:00:00 2001 From: Jordan Liggitt Date: Thu, 9 Mar 2017 13:01:12 -0500 Subject: [PATCH] Clarify password file group support --- docs/admin/authentication.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/admin/authentication.md b/docs/admin/authentication.md index b6a4b17193..2b598d3920 100644 --- a/docs/admin/authentication.md +++ b/docs/admin/authentication.md @@ -150,9 +150,10 @@ and the password cannot be changed without restarting API server. Note that basi authentication is currently supported for convenience while we finish making the more secure modes described above easier to use. -The basic auth file is a csv file with a minimum of 3 columns: password, -user name, user id, followed by optional group names. Note, if you have more than -one group the column must be double quoted e.g. +The basic auth file is a csv file with a minimum of 3 columns: password, user name, user id. +In Kubernetes version 1.6 and later, you can specify an optional fourth column containing +comma-separated group names. If you have more than one group, you must enclose the fourth +column value in double quotes ("). See the following example: ```conf password,user,uid,"group1,group2,group3"