Skip to content

Instantly share code, notes, and snippets.

@salrashid123

salrashid123/k8s_wif_14.txt

Created December 6, 2021 13:25
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save salrashid123/ec4066a1177877436b9427a3cd7a7f01 to your computer and use it in GitHub Desktop.
Save salrashid123/ec4066a1177877436b9427a3cd7a7f01 to your computer and use it in GitHub Desktop.
Download ZIP
k8s_wif_14.txt
Raw
k8s_wif_14.txt
export DISCOVERY_URL="https://e782-72-83-67-174.ngrok.io"
minikube start --driver=kvm2 --feature-gates=ServiceAccountIssuerDiscovery=true \
--extra-config=apiserver.service-account-jwks-uri=$DISCOVERY_URL/openid/v1/jwks \
--extra-config=apiserver.service-account-issuer=$DISCOVERY_URL
# enable the cluster role bindng to expose the discovery server
kubectl create clusterrolebinding oidc-reviewer --clusterrole=system:service-account-issuer-discovery --group=system:unauthenticated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment