Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

api-server: unset --authorization-mode to use --authorization-config #9791

Closed
Tracked by #9825
jfroy opened this issue Nov 25, 2024 · 1 comment · Fixed by #9816
Closed
Tracked by #9825

api-server: unset --authorization-mode to use --authorization-config #9791

jfroy opened this issue Nov 25, 2024 · 1 comment · Fixed by #9816
Assignees
@frezbo

Comments

@jfroy
Copy link
Contributor

jfroy commented Nov 25, 2024

Feature Request

Description

In order to use the new --authorization-config flag on api-server, --authorization-mode must be unset1. Looking at ControlPlaneStaticPodController.manageAPIServer, there does not seem to be a way to unset authorization-mode.

Footnotes

  1. https://kubernetes.io/docs/reference/access-authn-authz/authorization/#using-flags-for-your-authorization-module ↩
@frezbo frezbo self-assigned this Nov 27, 2024
frezbo added a commit to frezbo/talos that referenced this issue Nov 27, 2024
@frezbo
feat: add api-server authorization config
a9084f7 
Add support for configuring KubeAPIServer authorization config.

Fixes: siderolabs#9791

Signed-off-by: Noel Georgi <[email protected]>
frezbo added a commit to frezbo/talos that referenced this issue Nov 27, 2024
@frezbo
feat: add api-server authorization config
9f25b3f 
Add support for configuring KubeAPIServer authorization config.

Fixes: siderolabs#9791

Signed-off-by: Noel Georgi <[email protected]>
@frezbo frezbo mentioned this issue Nov 27, 2024
Merged
frezbo added a commit to frezbo/talos that referenced this issue Nov 27, 2024
@frezbo
feat: add api-server authorization config
96e468f 
Add support for configuring KubeAPIServer authorization config.

Fixes: siderolabs#9791

Signed-off-by: Noel Georgi <[email protected]>
frezbo added a commit to frezbo/talos that referenced this issue Nov 27, 2024
@frezbo
feat: add api-server authorization config
3b5f290 
Add support for configuring KubeAPIServer authorization config.

Fixes: siderolabs#9791

Signed-off-by: Noel Georgi <[email protected]>
frezbo added a commit to frezbo/talos that referenced this issue Nov 28, 2024
@frezbo
feat: add api-server authorization config
684b7fc 
Add support for configuring KubeAPIServer authorization config.

Fixes: siderolabs#9791

Signed-off-by: Noel Georgi <[email protected]>
frezbo added a commit to frezbo/talos that referenced this issue Nov 28, 2024
@frezbo
feat: add api-server authorization config
1269b47 
Add support for configuring KubeAPIServer authorization config.

Fixes: siderolabs#9791

Signed-off-by: Noel Georgi <[email protected]>
@smira smira mentioned this issue Nov 28, 2024
Closed
@jfroy
Copy link
Contributor Author

jfroy commented Nov 28, 2024

🚀

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jan 28, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@frezbo frezbo

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

feat: add api-server authorization config frezbo/talos
2 participants
@jfroy @frezbo