kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review 

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
This commit is contained in:
Ole Markus With 2021-01-11 19:25:58 +01:00 committed by Ole Markus With
parent 4d2eca199f
commit f71a037552
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/node_authorization.md
View File

@ -1,10 +1,10 @@
### **Node Authorization Service**
**The node authorization service is deprecated.**
In kOps 1.19 using Kubernetes 1.19 kOps will, on AWS, ignore the `nodeAuthorization` field of the cluster spec and
As of kOps 1.19 with AWS and Kubernetes 1.19, the `nodeAuthorization` field of the cluster spec will be ignored and
worker nodes will obtain client certificates for kubelet and other purposes through kops-controller.
In kOps 1.20, setting `nodeAuthorization` is forbidden on any Kubernetes version and you will have to upgrade to kubernetes 1.19+ to retain this feature.
As of kOps 1.20, setting `nodeAuthorization` is forbidden for any Kubernetes version and is replaced by the bootstrapping using kops-controller.
The [node authorization service] is an experimental service which in the absence of a kops-apiserver provides the distribution of tokens to the worker nodes. Bootstrap tokens provide worker nodes a short-time credential to request access kubeconfig certificate. A gist of the flow is;