From 601c4984f51fac26674954e135f57b624e2a0d60 Mon Sep 17 00:00:00 2001 From: Brad Davidson Date: Wed, 14 Apr 2021 12:42:21 -0700 Subject: [PATCH] Fix service-account-issuer Signed-off-by: Brad Davidson --- pkg/daemons/control/server.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/daemons/control/server.go b/pkg/daemons/control/server.go index 6f45e774bb..e20e895537 100644 --- a/pkg/daemons/control/server.go +++ b/pkg/daemons/control/server.go @@ -171,8 +171,8 @@ func apiServer(ctx context.Context, cfg *config.Control, runtime *config.Control argsMap["tls-cert-file"] = runtime.ServingKubeAPICert argsMap["tls-private-key-file"] = runtime.ServingKubeAPIKey argsMap["service-account-key-file"] = runtime.ServiceKey - argsMap["service-account-issuer"] = version.Program - argsMap["api-audiences"] = "unknown" + argsMap["service-account-issuer"] = "https://kubernetes.default.svc.cluster.local" + argsMap["api-audiences"] = "https://kubernetes.default.svc.cluster.local," + version.Program argsMap["kubelet-certificate-authority"] = runtime.ServerCA argsMap["kubelet-client-certificate"] = runtime.ClientKubeAPICert argsMap["kubelet-client-key"] = runtime.ClientKubeAPIKey