apiserver: add context to authn/authz kubeconfig errors

Kubernetes-commit: 99eda24de01c8b1b84b54cb763b540de35084ade
This commit is contained in:
Dr. Stefan Schimanski 2018-06-14 15:30:25 +02:00 committed by Kubernetes Publisher
parent e25a23a911
commit 65f0646df4
2 changed files with 3 additions and 2 deletions

View File

@ -266,7 +266,7 @@ func (s *DelegatingAuthenticationOptions) getRequestHeader() (*RequestHeaderAuth
func (s *DelegatingAuthenticationOptions) lookupInClusterClientCA() (*ClientCertAuthenticationOptions, error) {
clientConfig, err := s.getClientConfig()
if err != nil {
return nil, err
return nil, fmt.Errorf("failed to get delegated authentication kubeconfig: %v", err)
}
client, err := coreclient.NewForConfig(clientConfig)
if err != nil {

View File

@ -17,6 +17,7 @@ limitations under the License.
package options
import (
"fmt"
"time"
"github.com/spf13/pflag"
@ -125,7 +126,7 @@ func (s *DelegatingAuthorizationOptions) newSubjectAccessReview() (authorization
clientConfig, err = rest.InClusterConfig()
}
if err != nil {
return nil, err
return nil, fmt.Errorf("failed to get delegated authorization kubeconfig: %v", err)
}
// set high qps/burst limits since this will effectively limit API server responsiveness