Commit d1734287 authored by k8s-merge-robot's avatar k8s-merge-robot Committed by GitHub

Merge pull request #29475 from cjcullen/customuser

Automatic merge from submit-queue export KUBE_USER to salt (support custom usernames) for vagrant, vsph… GCE/GKE were handled in #29164, AWS was handled in #29428. This should cover the rest of the configurations that use ABAC.
parents d525d534 861583ac
...@@ -24,6 +24,7 @@ write_files: ...@@ -24,6 +24,7 @@ write_files:
docker_opts: "" docker_opts: ""
master_extra_sans: "DNS:kubernetes,DNS:kubernetes.default,DNS:kubernetes.default.svc,DNS:kubernetes.default.svc.cluster.local,DNS:kubernetes-master" master_extra_sans: "DNS:kubernetes,DNS:kubernetes.default,DNS:kubernetes.default.svc,DNS:kubernetes.default.svc.cluster.local,DNS:kubernetes-master"
keep_host_etcd: true keep_host_etcd: true
kube_user: $KUBE_USER
- path: /srv/kubernetes/openstack.conf - path: /srv/kubernetes/openstack.conf
content: | content: |
[Global] [Global]
......
...@@ -29,6 +29,7 @@ grains: ...@@ -29,6 +29,7 @@ grains:
cloud: photon-controller cloud: photon-controller
master_extra_sans: $MASTER_EXTRA_SANS master_extra_sans: $MASTER_EXTRA_SANS
api_servers: $MASTER_NAME api_servers: $MASTER_NAME
kube_user: $KUBE_USER
EOF EOF
# Auto accept all keys from minions that try to join # Auto accept all keys from minions that try to join
......
...@@ -90,6 +90,7 @@ grains: ...@@ -90,6 +90,7 @@ grains:
docker_opts: '$(echo "$DOCKER_OPTS" | sed -e "s/'/''/g")' docker_opts: '$(echo "$DOCKER_OPTS" | sed -e "s/'/''/g")'
master_extra_sans: '$(echo "$MASTER_EXTRA_SANS" | sed -e "s/'/''/g")' master_extra_sans: '$(echo "$MASTER_EXTRA_SANS" | sed -e "s/'/''/g")'
keep_host_etcd: true keep_host_etcd: true
kube_user: '$(echo "$KUBE_USER" | sed -e "s/'/''/g")'
EOF EOF
} }
......
...@@ -28,6 +28,7 @@ grains: ...@@ -28,6 +28,7 @@ grains:
cbr-cidr: $MASTER_IP_RANGE cbr-cidr: $MASTER_IP_RANGE
cloud: vsphere cloud: vsphere
master_extra_sans: $MASTER_EXTRA_SANS master_extra_sans: $MASTER_EXTRA_SANS
kube_user: $KUBE_USER
EOF EOF
# Auto accept all keys from minions that try to join # Auto accept all keys from minions that try to join
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment