modify kube-apiserver settings on coreOS cluster for setting up RBAC for users using OpenID

31 views
Skip to first unread message

Norman Khine

unread,
Jul 22, 2017, 5:53:03 PM7/22/17
to CoreOS Dev
Hello, I am having difficulties in setting up RBAC for users using OpenID as per https://cloud.google.com/community/tutorials/kubernetes-auth-openid-rbac guide

I have installed a kubernetes cluster running 595879546273/CoreOS-stable-1409.7.0-hvm image built with kops and have tried to modify the apiserver.manifest so as to include these as per the guide

ip-172-20-57-227 core # vim /etc/kubernetes/manifests/kube-apiserver.manifest

--oidc-issuer-url=https://accounts.google.com
--oidc-username-claim=email
--oidc-client-id=xxx.apps.googleusercontent.com


core@ip-172-20-57-227 ~ $ sudo vim /etc/kubernetes/manifests/kube-apiserver.manifest

but after i save the file, my api docker instance wouldn't restart and i loose connection.

core@ip-172-20-57-227 ~ $ kubectl get po
The connection to the server localhost:8080 was refused - did you specify the right host or port?


any advice is much appreciated
Reply all
Reply to author
Forward
0 new messages