I’m trying to test out OpenID Connect User authentication on Kubernetes using Docker for Windows (though it should be the same on Docker for Mac) on the edge channel.
In order to enable OpenID Connect auth for Kubernetes, you need to specify arguments on the api server such as
--oidc-groups-claim etc. This is trivial if you set up a kubernetes cluster by hand or if you are using minikube, it is done by setting the
--extra-config parameters (example).
However, with Kubernetes for Docker on Windows, the apiserver is run in a docker container that is setup by magic as all I can do is tick the button to enable Kubernetes.
Does anyone on here know how the magic works to set up these
kube-system docker containers such as the apiserver and how to modify/configure them? Apart from that, the new kubernetes support in Docker-edge is great!