I am trying to find a way to disable --basic-auth-file
on my cluster.
Can someone help me?
I am trying to find a way to disable --basic-auth-file
on my cluster.
Can someone help me?
Based on your comments your are using kops to deploy a cluster. In kops case, you need to add the following lines to disable the --basic-auth-file flag.
kops edit cluster --name <clustername> --state <state_path>
spec:
kubeAPIServer:
disableBasicAuth: true
spec and kubeAPIServer is probably already present in your cluster config
To apply the change, you need to run
kops update cluster --name <clustername> --state <state_path> <--yes>
and do a rolling upgrade
kops update cluster --name <clustername> --state <state_path> <--yes>
If you run the commands without --yes, it will basically shows you what it is going to do, with --yes it will apply the changes/roll the cluster.
Sadly KOPS is a bit lacking documentation on what are the options you can use in the cluster config yaml, the best I could find is their API definition: https://github.com/kubernetes/kops/blob/master/pkg/apis/kops/componentconfig.go#L246
You can disable it directly from the
/etc/kubernetes/manifests/kube-apiserver.yaml
file. For exampleThen restart your kube-apiserver containers on your master(s)