user1828780
user1828780

Reputation: 547

Enabling RBAC on Kubernetes on Azure

I'm trying to enable RBAC on my k8s cluster on azure. I ssh'ed into my master node and edited the kube-apiserver.yaml with the --authorization-mode=RBAC flag. Then I delete the kube-apiserver pod in order to restart the api server. However, when upon restart the --authorization-mode=RBAC config is ignored. Anybody have any advice?

Also the api server configuration is set to --v=10 and the image is v1.6.6

Upvotes: 0

Views: 1552

Answers (2)

user1828780
user1828780

Reputation: 547

I was finally able to generate a cluster that would allow me to enable RBAC on azure by generating an arm template using Azure Container Service Engine: https://github.com/Azure/acs-engine

By using the above library I could create a new arm template with RBAC enabled and then use the Azure CLI to create a RBAC, configurable Kubernetes cluster.

Upvotes: 1

Javier Salmeron
Javier Salmeron

Reputation: 8827

Deleting the pod is not enough. You need to restart kubelet in order for the new options to be applied.

   systemctl restart kubelet

Upvotes: 1

Related Questions