From 11430ef58fe4ca52eed76f45b510cb994e35bc88 Mon Sep 17 00:00:00 2001
From: Eugene Weiss <eugene@scytale.io>
Date: Thu, 16 Apr 2020 08:54:13 -0700
Subject: [PATCH] Add standard skip_kubelet_verification for minikube comment.

---
 k8s/quickstart/agent-configmap.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/k8s/quickstart/agent-configmap.yaml b/k8s/quickstart/agent-configmap.yaml
index 1192122..0f191a8 100644
--- a/k8s/quickstart/agent-configmap.yaml
+++ b/k8s/quickstart/agent-configmap.yaml
@@ -30,6 +30,9 @@ data:
 
       WorkloadAttestor "k8s" {
         plugin_data {
+          # Defaults to the secure kubelet port by default.
+          # Minikube does not have a cert in the cluster CA bundle that
+          # can authenticate the kubelet cert, so skip validation.
           skip_kubelet_verification = true
         }
       }