kuryr-kubernetes/releasenotes/notes/k8s-client-token-default-882ec49d1faffc29.yaml
Luis Tomas Bolivar 1e3ebc9783 Set defaults for certs and token on the k8s client
Change-Id: Id74eb4d8a7b1ea7ec97085de85f29244bbda25ea
2019-12-20 15:09:41 +01:00

12 lines
595 B
YAML

---
upgrade:
- |
In order to prioritize running kuryr-kubernetes services as pods on the
Kubernetes cluster they are supposed to serve, default values of
``[kubernetes]ssl_ca_crt_file`` and ``[kubernetes]token_file`` are now
set to where Kubernetes pods are having those files mounted
(``/var/run/secrets/kubernetes.io/serviceaccount/ca.crt`` and
``/var/run/secrets/kubernetes.io/serviceaccount/token``). This means that
if you want to run Kuryr services standalone through unauthenticated
K8s endpoint you need to set both of them to ``""`` in ``kuryr.conf``.