Merge pull request #9757 from johngmyers/kubelet-tokenreview

Default kubelet authenticationTokenWebhook to true for k8s 1.19+
kubernetes · Aug 15, 2020 · 8162134 · 8162134
2 parents afd3857 + e405d24
commit 8162134
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/nodeup/pkg/model/kubelet.go b/nodeup/pkg/model/kubelet.go
@@ -517,6 +517,10 @@ func (b *KubeletBuilder) buildKubeletConfigSpec() (*kops.KubeletConfigSpec, erro
 		c.AuthorizationMode = "Webhook"
 	}
 
+	if c.AuthenticationTokenWebhook == nil && b.Cluster.IsKubernetesGTE("1.19") {
+		c.AuthenticationTokenWebhook = fi.Bool(true)
+	}
+
 	return &c, nil
 }