From 8b45296661de1f12f441736ae44895ac30f320d4 Mon Sep 17 00:00:00 2001 From: Mike Danese Date: Mon, 22 Apr 2019 19:25:11 -0700 Subject: [PATCH] webhook: support exec auth plugin This allows webhook static kubeconfig to use an exec auth plugin to configure authentication. https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#authenticate-apiservers --- .../src/k8s.io/apiserver/pkg/util/webhook/authentication.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/staging/src/k8s.io/apiserver/pkg/util/webhook/authentication.go b/staging/src/k8s.io/apiserver/pkg/util/webhook/authentication.go index dd0f4e5e663..fb6a7fa3ba6 100644 --- a/staging/src/k8s.io/apiserver/pkg/util/webhook/authentication.go +++ b/staging/src/k8s.io/apiserver/pkg/util/webhook/authentication.go @@ -196,6 +196,9 @@ func restConfigFromKubeconfig(configAuthInfo *clientcmdapi.AuthInfo) (*rest.Conf config.Username = configAuthInfo.Username config.Password = configAuthInfo.Password } + if configAuthInfo.Exec != nil { + config.ExecProvider = configAuthInfo.Exec.DeepCopy() + } if configAuthInfo.AuthProvider != nil { return nil, fmt.Errorf("auth provider not supported") }