- Sort Score
- Result 10 results
- Languages All
Results 11 - 19 of 19 for clientCAFile (0.37 sec)
-
pkg/kubelet/apis/config/helpers_test.go
var ( // KubeletConfiguration fields that contain file paths. If you update this, also update KubeletConfigurationPathRefs! kubeletConfigurationPathFieldPaths = sets.New[string]( "StaticPodPath", "Authentication.X509.ClientCAFile", "TLSCertFile", "TLSPrivateKeyFile", "ResolverConfig", "PodLogsDir", ) // KubeletConfiguration fields that do not contain file paths.
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Jun 04 06:25:43 UTC 2024 - 10.2K bytes - Viewed (0) -
pkg/kubeapiserver/options/authentication_test.go
UsernameHeaders: []string{"x-remote-user"}, GroupHeaders: []string{"x-remote-group"}, ExtraHeaderPrefixes: []string{"x-remote-extra-"}, ClientCAFile: "testdata/root.pem", AllowedNames: []string{"kube-aggregator"}, }, ServiceAccounts: &ServiceAccountAuthenticationOptions{ Lookup: true, Issuers: []string{"http://foo.bar.com"}, },
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Apr 24 18:25:29 UTC 2024 - 36.5K bytes - Viewed (0) -
cmd/kubelet/app/server.go
}, CertFile: kc.TLSCertFile, KeyFile: kc.TLSPrivateKeyFile, } if len(kc.Authentication.X509.ClientCAFile) > 0 { clientCAs, err := certutil.NewPool(kc.Authentication.X509.ClientCAFile) if err != nil { return nil, fmt.Errorf("unable to load client CA file %s: %w", kc.Authentication.X509.ClientCAFile, err) } // Specify allowed CAs for client certificates tlsOptions.Config.ClientCAs = clientCAs
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Jun 07 00:05:34 UTC 2024 - 53.9K bytes - Viewed (0) -
cmd/kube-apiserver/app/testing/testserver.go
if err := os.WriteFile(proxyCACertFile, testutil.EncodeCertPEM(proxySigningCert), 0644); err != nil { return result, err } s.Authentication.RequestHeader.ClientCAFile = proxyCACertFile // give the kube api server an "identity" it can use to for request header auth // so that aggregated api servers can understand who the calling user is
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Mon Apr 29 18:59:21 UTC 2024 - 17.6K bytes - Viewed (0) -
pkg/kubelet/apis/config/types.go
type KubeletX509Authentication struct { // clientCAFile is the path to a PEM-encoded certificate bundle. If set, any request presenting a client certificate // signed by one of the authorities in the bundle is authenticated with a username corresponding to the CommonName, // and groups corresponding to the Organization in the client certificate. ClientCAFile string }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Mar 05 21:10:42 UTC 2024 - 35.1K bytes - Viewed (0) -
hack/local-up-cluster.sh
echo " enabled: true" else echo " enabled: false" fi echo " x509:" if [[ -n "${CLIENT_CA_FILE:-}" ]]; then echo " clientCAFile: \"${CLIENT_CA_FILE}\"" else echo " clientCAFile: \"${CERT_DIR}/client-ca.crt\"" fi # authorization if [[ "${KUBELET_AUTHORIZATION_WEBHOOK:-}" != "false" ]]; then echo "authorization:"
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sat May 25 02:33:52 UTC 2024 - 53.3K bytes - Viewed (0) -
cmd/kubelet/app/options/options.go
"The duration to cache responses from the webhook token authenticator.") fs.StringVar(&c.Authentication.X509.ClientCAFile, "client-ca-file", c.Authentication.X509.ClientCAFile, ""+ "If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file "+
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Thu Apr 18 07:00:05 UTC 2024 - 41.6K bytes - Viewed (0) -
cluster/gce/util.sh
} # cat the Kubelet config yaml for linux nodes function print-linux-node-kubelet-config { # Keep authentication.x509.clientCAFile in sync with CA_CERT_BUNDLE_PATH in configure-helper.sh cat <<EOF staticPodPath: /etc/kubernetes/manifests authentication: x509: clientCAFile: /etc/srv/kubernetes/pki/ca-certificates.crt EOF } # cat the Kubelet config yaml for windows nodes
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Jun 12 21:47:17 UTC 2024 - 161.6K bytes - Viewed (0) -
pkg/generated/openapi/zz_generated.openapi.go
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Jun 05 18:37:07 UTC 2024 - 3M bytes - Viewed (0)