Skip to content

Commit 768905e

Browse files
authored
Merge pull request #30385 from kvaps/fix-konnectivity-audience
Refer ServiceAccountTokenVolumeProjection documentation instead of providing incorrect instructions.
2 parents 20b6b87 + 69c6dc0 commit 768905e

File tree

1 file changed

+2
-9
lines changed

1 file changed

+2
-9
lines changed

content/en/docs/tasks/extend-kubernetes/setup-konnectivity.md

Lines changed: 2 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -25,15 +25,8 @@ You need to configure the API Server to use the Konnectivity service
2525
and direct the network traffic to the cluster nodes:
2626

2727
1. Make sure that
28-
the `ServiceAccountTokenVolumeProjection` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
29-
is enabled. You can enable
30-
[service account token volume protection](/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection)
31-
by providing the following flags to the kube-apiserver:
32-
```
33-
--service-account-issuer=api
34-
--service-account-signing-key-file=/etc/kubernetes/pki/sa.key
35-
--api-audiences=system:konnectivity-server
36-
```
28+
[Service Account Token Volume Projection](/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection)
29+
feature enabled in your cluster. It is enabled by default since Kubernetes v1.20.
3730
1. Create an egress configuration file such as `admin/konnectivity/egress-selector-configuration.yaml`.
3831
1. Set the `--egress-selector-config-file` flag of the API Server to the path of
3932
your API Server egress configuration file.

0 commit comments

Comments
 (0)