Search code examples
kuberneteskubeconfigkubernetes-rbac

what is config-mode in kubeconfig file?

I see there is a field "config-mode" in Kubernetes configuration file (kubeconfig).

users:
- name: myuser
  user:
    auth-provider:
      config:
        access-token: xxxxx
        apiserver-id: xxxxx
        client-id: xxxxx
        config-mode: "1"
        environment: PublicCloud
        expires-in: "xxxx"
        expires-on: "xxxxxxx"
        refresh-token: xxxxxx
        tenant-id: xxxxxx
      name: user1

What is the use of this configuration?

Solution

  • This is flag specific for azure.
    Here is a quote from kubernetes CHANGELOG page:

    Added a config-mode flag in azure auth module to enable getting AAD token without spn: prefix in audience claim.
    When it's not specified, the default behavior doesn't change.
    (#87630, @weinong) [SIG API Machinery, Auth, CLI and Cloud Provider]

    Reference to the changelog page
    Reference to the PR that added this flag