Skip to content

Latest commit

 

History

History
15 lines (12 loc) · 673 Bytes

service_account_token_volumes.md

File metadata and controls

15 lines (12 loc) · 673 Bytes

Some services, such as Istio and Envoy's Secret Discovery Service (SDS), take advantage of a new feature in Kubernetes 1.12+, Service Account Token Volume Projection.

  1. In order to enable this feature for Kubernetes 1.12+, add the following config to your cluster spec:
    kubeAPIServer:
        apiAudiences:
        - api
        - istio-ca
        serviceAccountIssuer: kubernetes.default.svc
        serviceAccountKeyFile:
        - /srv/kubernetes/server.key
        serviceAccountSigningKeyFile: /srv/kubernetes/server.key