search

kelseyhightower / kubernetes-the-hard-way

Bootstrap Kubernetes the hard way. No scripts.
Apache License 2.0
41.26k stars 14.12k forks source link

Remove ability for anonymous authentication #615

Open arcreigh opened 4 years ago

arcreigh commented 4 years ago

Add --anonymous-auth=false \ As the default allows anonymous authentication --anonymous-auth Default: true Enables anonymous requests to the secure port of the API server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.

Reference: https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/