scottk/kubernetes
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/kubernetes.git synced 2025-11-03 19:58:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #100764 from benhxy/tls

Browse Source 
Use GKE specific configuration for kube-apiserver SNI cert
This commit is contained in:
Kubernetes Prow Robot
2021-04-15 19:52:22 -07:00
committed by GitHub
parent 2342ac3cfa ccb742c43c
commit 7ecd93ea1e
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
cluster/gce/gci/configure-kubeapiserver.sh
View File

@@ -95,6 +95,9 @@ function start-kube-apiserver {
if [[ -n "${TLS_CIPHER_SUITES:-}" ]]; then if [[ -n "${TLS_CIPHER_SUITES:-}" ]]; then
params+=" --tls-cipher-suites=${TLS_CIPHER_SUITES}" params+=" --tls-cipher-suites=${TLS_CIPHER_SUITES}"
fi fi
if [[ -e "${KUBE_HOME}/bin/gke-internal-configure-helper.sh" ]]; then
params+=" $(gke-kube-apiserver-internal-sni-param)"
fi
params+=" --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname" params+=" --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname"
if [[ -s "${REQUESTHEADER_CA_CERT_PATH:-}" ]]; then if [[ -s "${REQUESTHEADER_CA_CERT_PATH:-}" ]]; then
params+=" --requestheader-client-ca-file=${REQUESTHEADER_CA_CERT_PATH}" params+=" --requestheader-client-ca-file=${REQUESTHEADER_CA_CERT_PATH}"