Question

Deploying an API server with specific flags

Posted on December 27, 2022
DigitalOcean Managed Kubernetes Engineering
Asked by 24326124313024506d4d41514f6b38

I am trying to setup DEX in my kubernetes clusters and for that I want to configure API server with following flags. How can I achieve that?

--oidc-issuer-url=https://dex.example.com:32000
--oidc-client-id=example-app
--oidc-ca-file=/etc/ssl/certs/openid-ca.pem
--oidc-username-claim=email
--oidc-groups-claim=groups

https://dexidp.io/docs/kubernetes/#configuring-the-openid-connect-plugin

Also, I cannot find any file called kube-apiserver.yaml in /etc/kubernetes/manifests/kube-apiserver.yaml where I can add these flags and restart api-server.

If there is a way to this using kubeadm, please post specific example.

Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Bobby Iliev

Site Moderator

• December 29, 2022

Hi there,

Note that if you are using the DigitalOcean Managed Kubernetes service, you would not have access to the control plane node as it is managed by DigitalOcean.

If you want to have full access to your Kubernetes cluster, you could install Kubernetes on a few Droplets and handle the management yourself:

https://www.digitalocean.com/community/tutorials/how-to-create-a-kubernetes-cluster-using-kubeadm-on-ubuntu-20-04

Best,

Bobby