Adding Issuer

https://stackoverflow.com/a/69303712

As soon as our vault pods restarted and after unsealing them again, they are failing the auth mechanism in init container. This will fix the same.
This commit is contained in:
Pankaj 2022-03-27 11:44:04 +05:30 committed by GitHub
parent 8dd82ada77
commit f91b1641d9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -173,7 +173,8 @@ vault auth enable kubernetes
vault write auth/kubernetes/config \ vault write auth/kubernetes/config \
token_reviewer_jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" \ token_reviewer_jwt="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" \
kubernetes_host=https://${KUBERNETES_PORT_443_TCP_ADDR}:443 \ kubernetes_host=https://${KUBERNETES_PORT_443_TCP_ADDR}:443 \
kubernetes_ca_cert=@/var/run/secrets/kubernetes.io/serviceaccount/ca.crt kubernetes_ca_cert=@/var/run/secrets/kubernetes.io/serviceaccount/ca.crt \
issuer="https://kubernetes.default.svc.cluster.local"
exit exit
``` ```