From 099a2bd91c4adc432cf781769803ca3bc2b2c283 Mon Sep 17 00:00:00 2001 From: Ilias Rinis Date: Wed, 30 Oct 2024 15:01:41 +0100 Subject: [PATCH] operator: add structured auth config as a revision configmap --- pkg/operator/starter.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/pkg/operator/starter.go b/pkg/operator/starter.go index 41592a0e4d..32ee11ce29 100644 --- a/pkg/operator/starter.go +++ b/pkg/operator/starter.go @@ -26,6 +26,7 @@ import ( "github.com/openshift/cluster-kube-apiserver-operator/pkg/operator/certrotationtimeupgradeablecontroller" "github.com/openshift/cluster-kube-apiserver-operator/pkg/operator/configmetrics" "github.com/openshift/cluster-kube-apiserver-operator/pkg/operator/configobservation/apienablement" + "github.com/openshift/cluster-kube-apiserver-operator/pkg/operator/configobservation/auth" "github.com/openshift/cluster-kube-apiserver-operator/pkg/operator/configobservation/configobservercontroller" "github.com/openshift/cluster-kube-apiserver-operator/pkg/operator/configobservation/node" "github.com/openshift/cluster-kube-apiserver-operator/pkg/operator/connectivitycheckcontroller" @@ -614,6 +615,9 @@ var RevisionConfigMaps = []revision.RevisionResource{ {Name: "sa-token-signing-certs"}, {Name: "kube-apiserver-audit-policies"}, + + // optional configmap containing the OIDC structured auth config + {Name: auth.AuthConfigCMName, Optional: true}, } // RevisionSecrets is a list of secrets that are directly copied for the current values. A different actor/controller modifies these.