Add docs for RKE cluster user authentication

Information on configuring RKE authn webhooks, provisioning RKE
clusters as authorized cluster endpoints, and using kubeconfig contexts
for connecting directly to a cluster.

For rancher/docs/issues/1010
This commit is contained in:
Erik Wilson
2019-03-22 10:08:34 -07:00
committed by Denise Schannon
parent e5bba6fb18
commit b08232511f
4 changed files with 30 additions and 0 deletions
@@ -12,3 +12,12 @@ authentication:
- "10.18.160.10"
- "my-loadbalancer-1234567890.us-west-2.elb.amazonaws.com"
```
RKE also supports the webhook authentication strategy. You can enable both x509 and webhook strategies by using a `|` separator in the configuration. Contents of the webhook config file should be provided, see [Kubernetes webhook documentation](https://kubernetes.io/docs/reference/access-authn-authz/webhook/) for information on the file format. Additionally, a cache timeout for webhook authentication responses can be set.
```yaml
authentication:
strategy: x509|webhook
webhook:
config_file: "...."
cache_timeout: 5s
```