Fix service-account-issuer

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
pull/3219/head v1.21.0-alpha1+k3s1
Brad Davidson 2021-04-14 12:42:21 -07:00 committed by Brad Davidson
parent 4fbc241679
commit 601c4984f5
1 changed files with 2 additions and 2 deletions

View File

@ -171,8 +171,8 @@ func apiServer(ctx context.Context, cfg *config.Control, runtime *config.Control
argsMap["tls-cert-file"] = runtime.ServingKubeAPICert
argsMap["tls-private-key-file"] = runtime.ServingKubeAPIKey
argsMap["service-account-key-file"] = runtime.ServiceKey
argsMap["service-account-issuer"] = version.Program
argsMap["api-audiences"] = "unknown"
argsMap["service-account-issuer"] = "https://kubernetes.default.svc.cluster.local"
argsMap["api-audiences"] = "https://kubernetes.default.svc.cluster.local," + version.Program
argsMap["kubelet-certificate-authority"] = runtime.ServerCA
argsMap["kubelet-client-certificate"] = runtime.ClientKubeAPICert
argsMap["kubelet-client-key"] = runtime.ClientKubeAPIKey