Skip to content

Instantly share code, notes, and snippets.

@carldanley
Created April 16, 2017 13:39
Show Gist options
  • Save carldanley/0121ec29aae278ff95cd14e77fc83da0 to your computer and use it in GitHub Desktop.
Save carldanley/0121ec29aae278ff95cd14e77fc83da0 to your computer and use it in GitHub Desktop.
k8s authentication & authorization webhooks
clusters:
- name: tbxaccounts
cluster:
server: https://some.auth.service/webhook-authn?cluster=kube-prod
users:
- name: apiserver
current-context: webhook
contexts:
- context:
cluster: tbxaccounts
user: apiserver
name: webhook
--runtime-config=extensions/v1beta1=true,extensions/v1beta1/networkpolicies=true,batch/v2alpha1=true,authentication.k8s.io/v1beta1=true,authorization.k8s.io/v1beta1=true \
--authentication-token-webhook-config-file=/etc/kubernetes/kubeconfig/webhook-authn \
--authentication-token-webhook-cache-ttl=5m \
--authorization-webhook-config-file=/etc/kubernetes/kubeconfig/webhook-authz \
--authorization-webhook-cache-unauthorized-ttl=5m \
--authorization-webhook-cache-authorized-ttl=5m
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment