Skip to content

K
k3s
Unverified Commit 3ea683c1 authored by Kubernetes Submit Queue's avatar Kubernetes Submit Queue Committed by GitHub
Browse files
Options

Merge pull request #66539 from mikedanese/automated-cherry-pick-of-#64172-release-1.10

Automatic merge from submit-queue. Automated cherry pick of #64172 release 1.10 Automated cherry pick of #64172 release 1.10 ```release-note Reorder the authorizers in GCP to reduce traffic on the authorization webhook. ```
parents 1de34f08 6f810094
Hide whitespace changes
Inline Side-by-side
Showing with 1 addition and 1 deletion
cluster/gce/gci/configure-helper.sh
View file @ 3ea683c1
...@@ -1702,7 +1702,7 @@ function start-kube-apiserver { ...@@ -1702,7 +1702,7 @@ function start-kube-apiserver {
local webhook_config_mount="" local webhook_config_mount=""
local webhook_config_volume="" local webhook_config_volume=""
if [[ -n "${GCP_AUTHZ_URL:-}" ]]; then if [[ -n "${GCP_AUTHZ_URL:-}" ]]; then
authorization_mode="Webhook,${authorization_mode}" authorization_mode="${authorization_mode},Webhook"
params+=" --authorization-webhook-config-file=/etc/gcp_authz.config" params+=" --authorization-webhook-config-file=/etc/gcp_authz.config"
webhook_config_mount="{\"name\": \"webhookconfigmount\",\"mountPath\": \"/etc/gcp_authz.config\", \"readOnly\": false}," webhook_config_mount="{\"name\": \"webhookconfigmount\",\"mountPath\": \"/etc/gcp_authz.config\", \"readOnly\": false},"
webhook_config_volume="{\"name\": \"webhookconfigmount\",\"hostPath\": {\"path\": \"/etc/gcp_authz.config\", \"type\": \"FileOrCreate\"}}," webhook_config_volume="{\"name\": \"webhookconfigmount\",\"hostPath\": {\"path\": \"/etc/gcp_authz.config\", \"type\": \"FileOrCreate\"}},"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment