kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #10364 from johngmyers/custom-account-issuer 

Use custom-configured ServiceAccountIssuer when present
This commit is contained in:
Kubernetes Prow Robot 2020-12-07 19:39:11 -08:00 committed by GitHub
parent e2a5695995 e7508cc973
commit 2f6c67e92c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pkg/model/iam/subject.go
View File

@ -82,6 +82,9 @@ func BuildNodeRoleSubject(igRole kops.InstanceGroupRole) (Subject, error) {
// ServiceAccountIssuer determines the issuer in the ServiceAccount JWTs
func ServiceAccountIssuer(clusterName string, clusterSpec *kops.ClusterSpec) string {
if clusterSpec.KubeAPIServer != nil && clusterSpec.KubeAPIServer.ServiceAccountIssuer != nil {
return *clusterSpec.KubeAPIServer.ServiceAccountIssuer
}
return "https://api." + clusterName
}