kuryr-kubernetes/releasenotes/notes/k8s-client-token-default-88...

12 lines
595 B
YAML

---
upgrade:
- |
In order to prioritize running kuryr-kubernetes services as pods on the
Kubernetes cluster they are supposed to serve, default values of
``[kubernetes]ssl_ca_crt_file`` and ``[kubernetes]token_file`` are now
set to where Kubernetes pods are having those files mounted
(``/var/run/secrets/kubernetes.io/serviceaccount/ca.crt`` and
``/var/run/secrets/kubernetes.io/serviceaccount/token``). This means that
if you want to run Kuryr services standalone through unauthenticated
K8s endpoint you need to set both of them to ``""`` in ``kuryr.conf``.