<p>I am using <a href="https://github.com/kubernetes-sigs/kubespray" rel="nofollow noreferrer">kubespray</a> for the deployment of a kubernetes cluster and 
want to set some API Server parameters for the deployment. In specific I want to configure the authentication via OpenID Connect (e.g set the <a href="https://kubernetes.io/docs/reference/access-authn-authz/authentication/#configuring-the-api-server" rel="nofollow noreferrer"><code>oidc-issuer-url</code></a> parameter). I saw that kubespray has some vars to set (<a href="https://github.com/kubernetes-sigs/kubespray/blob/master/docs/vars.md" rel="nofollow noreferrer">https://github.com/kubernetes-sigs/kubespray/blob/master/docs/vars.md</a>), but not the ones I am looking for.</p>

<p>Is there a way to set these parameters via kubespray? I don't want to configure each master manually (e.g by editing the <code>/etc/kubernetes/manifests/kube-apiserver.yaml</code> files).</p>

<p>Thanks for your help</p>

chresse
<p>The <a href="https://github.com/kubernetes-sigs/kubespray/blob/b708db4cd5256e2c114ff872d4a7a56e86b7ac34/inventory/sample/group_vars/k8s-cluster/k8s-cluster.yml#L63" rel="nofollow noreferrer">k8s-cluster.yml</a> file has some parameters which allow to set the OID configuration:</p>

<pre><code>kube_oidc_auth: true
...
kube_oidc_url: https:// ...
kube_oidc_client_id: kubernetes
kube_oidc_ca_file: "{{ kube_cert_dir }}/ca.pem"
kube_oidc_username_claim: sub
kube_oidc_username_prefix: oidc:
kube_oidc_groups_claim: groups
kube_oidc_groups_prefix: oidc:
</code></pre>

<p>These parameters are the counter parts to the <a href="https://kubernetes.io/docs/reference/access-authn-authz/authentication/#configuring-the-api-server" rel="nofollow noreferrer">oidc api server parameters</a></p>
