mirror of https://github.com/kubernetes/kops.git
2eae62d460
Automatic merge from submit-queue. Support for OIDC 'username-prefix' and 'groups-prefix' flags ### What Added support for `--oidc-username-prefix` and `--oidc-groups-prefix`. By passing these it's possible to override the default prefixes used to map the OIDC user with the username in kubernetes. ### See See: https://kubernetes.io/docs/admin/authentication/#configuring-the-api-server ### IMPORTANT I'm far from a kubernetes/KOPS, this is not tested so someone needs to have a look and see if something is missing or if this can cause troubles! (don't want to accidentally cause the destruction of the universe 💥 ) It's basically the same done in this other PR: https://github.com/kubernetes/kops/pull/1438/files I did **not** change the `zz_generated.conversion.go` files as according to comment at the top of them they're autogenerated: ```go // This file was autogenerated by conversion-gen. Do not edit it manually! ``` (I wonder if they should be `.gitignore`d) ### Fixes This should fix [#4007: field oidcUsernamePrefix is not recognized in cluster configuration file](https://github.com/kubernetes/kops/issues/4007) |
||
|---|---|---|
| .. | ||
| advisories | ||
| api-server | ||
| apireference | ||
| asciicast | ||
| calico_cidr_migration | ||
| cli | ||
| development | ||
| examples | ||
| img | ||
| releases | ||
| tutorial | ||
| work_in_progress | ||
| README.md | ||
| addon_manager.md | ||
| addons.md | ||
| arguments.md | ||
| authentication.md | ||
| aws-china.md | ||
| aws.md | ||
| bastion.md | ||
| boot-sequence.md | ||
| changing_configuration.md | ||
| cluster_spec.md | ||
| cluster_template.md | ||
| cluster_upgrades_and_migrations.md | ||
| commands.md | ||
| creating_subdomain.md | ||
| download_config.md | ||
| etcd_backup.md | ||
| etcd_volume_encryption.md | ||
| experimental.md | ||
| gpu.md | ||
| high_availability.md | ||
| http_proxy.md | ||
| iam_roles.md | ||
| images.md | ||
| install.md | ||
| instance_groups.md | ||
| kubectl.md | ||
| labels.md | ||
| manifests_and_customizing_via_api.md | ||
| mfa.md | ||
| networking.md | ||
| node_resource_handling.md | ||
| ns.md | ||
| philosophy.md | ||
| releases.md | ||
| rotate-secrets.md | ||
| run_in_existing_vpc.md | ||
| secrets.md | ||
| security.md | ||
| single-to-multi-master.md | ||
| state.md | ||
| terraform.md | ||
| topology.md | ||
| update_kops.md | ||
| upgrade.md | ||
| upgrade_from_k8s_12.md | ||
| upgrade_from_kops_1.6_to_1.7_calico_cidr_migration.md | ||
| upgrade_from_kubeup.md | ||
| vsphere-dev.md | ||
| vsphere-development-status.md | ||
README.md
Documentation Index
Quick start
Overview
- Getting started on AWS
- Command-line interface
- Inspection
kopsdesign documents- Networking
- Operations
- Security
- Development
Command-line interface
- CLI argument explanations
- CLI reference
- Commands
- miscellaneous CLI-related remarks
- Experimental features
- list of and how to enable experimental flags in the CLI
- kubectl
- how to point kubectl to your
kopscluster
- how to point kubectl to your
Advanced / Detailed List of Configurations
API / Configuration References
API Usage Guides
kopscluster API definitions- overview of some of the API value to customize a
kopscluster
- overview of some of the API value to customize a
kopsinstance groups API- overview of some of the API value to customize a
kopsgroups of k8s nodes
- overview of some of the API value to customize a
- Using Manifests and Customizing via the API
Operations
- Cluster addon manager
- Cluster addons
- Cluster configuration management
- Cluster desired configuration creation from template
- Cluster upgrades and migrations
etcdvolume encryption setupetcdbackup setup- GPU setup
- High Availability
- InstanceGroup images
- how to use other image for cluster nodes, and information on available/tested images
k8supgradingkopsupdatingkube-uptokopsupgrade- Label management
- for cluster nodes
- Secret management
- Moving from a Single Master to Multiple HA Masters
- Developers guide for vSphere support
- vSphere support status
Networking
- Networking Overview including CNI
- Run
kopsin an existing VPC - Supported network topologies
- Subdomain setup
kops design documents
Security
- Bastion setup
- IAM roles
- MFA setup
- how to set up MFA for
kops
- how to set up MFA for
- Security
- overview of secret storage, SSH credentials etc.
Inspection
- Download
kopsconfiguration- methods to download the current generated
kopsconfiguration
- methods to download the current generated
- Get AWS subdomain NS records
Development
- Developing using Docker
- Development with vSphere
- Documentation Guidelines
- E2E testing with
kopsclusters - Example on how to add a feature
- Hack Directory
- How to update
kopsAPI - Low level description on how kops works
- Notes on Gossip design
- Notes on master instance sizing
- Our release process
- Releasing with Homebrew
- Rolling Update Diagrams
- Updating Go Dependencies