File tree Expand file tree Collapse file tree 1 file changed +2
-9
lines changed
content/en/docs/tasks/extend-kubernetes Expand file tree Collapse file tree 1 file changed +2
-9
lines changed Original file line number Diff line number Diff line change @@ -25,15 +25,8 @@ You need to configure the API Server to use the Konnectivity service
25
25
and direct the network traffic to the cluster nodes:
26
26
27
27
1 . Make sure that
28
- the ` ServiceAccountTokenVolumeProjection ` [ feature gate] ( /docs/reference/command-line-tools-reference/feature-gates/ )
29
- is enabled. You can enable
30
- [ service account token volume protection] ( /docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection )
31
- by providing the following flags to the kube-apiserver:
32
- ```
33
- --service-account-issuer=api
34
- --service-account-signing-key-file=/etc/kubernetes/pki/sa.key
35
- --api-audiences=system:konnectivity-server
36
- ```
28
+ [ Service Account Token Volume Projection] ( /docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection )
29
+ feature enabled in your cluster. It is enabled by default since Kubernetes v1.20.
37
30
1 . Create an egress configuration file such as ` admin/konnectivity/egress-selector-configuration.yaml ` .
38
31
1 . Set the ` --egress-selector-config-file ` flag of the API Server to the path of
39
32
your API Server egress configuration file.
You can’t perform that action at this time.
0 commit comments