apiserver: allow disabling authz/n via options

Kubernetes-commit: dffe50f8bd820295f7f1fbc56a6269b6b8c6966b
This commit is contained in:
Dr. Stefan Schimanski 2017-09-06 18:15:43 +02:00 committed by Kubernetes Publisher
parent e4b1b0656b
commit 8ec769da6b
2 changed files with 10 additions and 0 deletions

View File

@ -143,6 +143,11 @@ func (s *DelegatingAuthenticationOptions) AddFlags(fs *pflag.FlagSet) {
}
func (s *DelegatingAuthenticationOptions) ApplyTo(c *server.Config) error {
if s == nil {
c.Authenticator = nil
return nil
}
clientCA, err := s.getClientCA()
if err != nil {
return err

View File

@ -71,6 +71,11 @@ func (s *DelegatingAuthorizationOptions) AddFlags(fs *pflag.FlagSet) {
}
func (s *DelegatingAuthorizationOptions) ApplyTo(c *server.Config) error {
if s == nil {
c.Authorizer = authorizerfactory.NewAlwaysAllowAuthorizer()
return nil
}
cfg, err := s.ToAuthorizationConfig()
if err != nil {
return err