diff --git a/cluster/ansible/manifests/group_vars/k8s_cluster/k8s-cluster.yml b/cluster/ansible/manifests/group_vars/k8s_cluster/k8s-cluster.yml index 968eae41..4db8649e 100644 --- a/cluster/ansible/manifests/group_vars/k8s_cluster/k8s-cluster.yml +++ b/cluster/ansible/manifests/group_vars/k8s_cluster/k8s-cluster.yml @@ -51,9 +51,10 @@ kube_oidc_client_id: 7cd1df19-24ea-46d7-acd3-5336283139e0 ## Optional settings for OIDC # kube_oidc_ca_file: "{{ kube_cert_dir }}/ca.crt" kube_oidc_username_claim: upn -kube_oidc_username_prefix: 'mathmast:' +# Set to - means that the username is the entire value of the claim +kube_oidc_username_prefix: - kube_oidc_groups_claim: roles -kube_oidc_groups_prefix: 'mathmast:' +# kube_oidc_groups_prefix: 'oidc:' ## Variables to control webhook authn/authz # kube_webhook_token_auth: false