upstream/kubernetes
1
0
Fork 0
mirror of https://github.com/kubernetes/kubernetes.git synced 2026-02-15 00:37:52 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
kubernetes/pkg/master
History
Kubernetes Submit Queue 1519422aba Merge pull request #41814 from deads2k/agg-06-cas 
Automatic merge from submit-queue

add client-ca to configmap in kube-public

Client CA information is not secret and it's required for any API server trying to terminate a TLS connection.  This pull adds the information to configmaps in `kube-public` that look like this:


```yaml
apiVersion: v1
data:
  client-ca.crt: |
    -----BEGIN CERTIFICATE-----
    -----END CERTIFICATE-----
  requestheader-allowed-names: '["system:auth-proxy"]'
  requestheader-client-ca-file: |
    -----BEGIN CERTIFICATE-----
    -----END CERTIFICATE-----
  requestheader-extra-headers-prefix: '["X-Remote-Extra-"]'
  requestheader-group-headers: '["X-Remote-Group"]'
  requestheader-username-headers: '["X-Remote-User"]'
kind: ConfigMap
metadata:
  creationTimestamp: 2017-02-22T17:54:37Z
  name: extension-apiserver-authentication
  namespace: kube-system
  resourceVersion: "6"
  selfLink: /api/v1/namespaces/kube-system/configmaps/extension-apiserver-authentication
  uid: fa1dd328-f927-11e6-8b0e-28d2447dc82b

```

@kubernetes/sig-auth-api-reviews @liggitt @kubernetes/sig-api-machinery-pr-reviews @lavalamp @sttts 


There will need to be a corresponding pull for permissions
2017-02-26 09:32:44 -08:00
..
ports Enable auto-generating sources rules 2017-01-05 14:14:13 -08:00
thirdparty Update bazel 2017-02-15 10:25:15 +01:00
tunneler move authoritative client-go utils out of pkg 2017-01-24 08:59:18 -05:00
BUILD Revert "Merge pull request #40088 from jsafrane/storage-ga-v1" 2017-02-25 22:35:15 -05:00
client_ca_hook.go add client-ca to configmap in kube-public 2017-02-24 14:51:12 -05:00
client_ca_hook_test.go add client-ca to configmap in kube-public 2017-02-24 14:51:12 -05:00
controller.go Merge pull request #41115 from rajatchopra/kube_service_fix 2017-02-13 17:03:22 -08:00
controller_test.go move util/intstr to apimachinery 2017-01-30 12:46:59 -05:00
doc.go
import_known_versions.go mechanical repercussions 2017-01-13 08:27:14 -05:00
import_known_versions_test.go move util/intstr to apimachinery 2017-01-30 12:46:59 -05:00
master.go Revert "Merge pull request #40088 from jsafrane/storage-ga-v1" 2017-02-25 22:35:15 -05:00
master_openapi_test.go Mechanical fixup imports: pkg/genericapiserver 2017-02-03 08:15:45 +01:00
master_test.go k8s.io/apiserver: straighten EtcdOptions, backend Config and kube RESTOptionsFactory 2017-02-15 10:24:59 +01:00
OWNERS add deads2k and sttts to kubeapiserver owners 2017-02-23 08:10:38 -05:00
services.go Move DefaultServiceIPRange into pkg/master 2016-12-03 18:34:22 +01:00