From 1fa08bc2903e7b3aa203b057db86c93140b6b768 Mon Sep 17 00:00:00 2001 From: Martin Linkhorst Date: Wed, 8 Jan 2020 15:24:49 +0100 Subject: [PATCH] chore: enable service account token rotation for testing Signed-off-by: Martin Linkhorst --- cluster/config-defaults.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cluster/config-defaults.yaml b/cluster/config-defaults.yaml index 3f43ccef45..34df59106c 100644 --- a/cluster/config-defaults.yaml +++ b/cluster/config-defaults.yaml @@ -299,7 +299,7 @@ apiserver_proxy: "true" # requires apiserver_proxy to be set to "true" allow_external_service_accounts: "false" # issue service account tokens with expiration time. -rotate_service_account_tokens: "false" +rotate_service_account_tokens: "true" # use kube-aws-iam-controller for kube-system components kube_aws_iam_controller_kube_system_enable: "true"