<p>My goal is to set appscode guard application.
In order to so i need to set the value of authentication-token-webhook-config-file flag in Kubernetes api server.</p>

<p>How to do that ?</p>

Oron Golan
<p>If you are looking for the way to add an option key to <code>kube-apiserver</code> pod on existing cluster, you just need to edit file <code>/etc/kubernetes/manifests/kube-apiserver.yaml</code> <strong>on master node</strong>. </p>

<p>After saving this file, <code>kube-apiserver</code> pod will be restarted by <code>kubelet</code> service automatically.</p>

<p>Considering that flag you've mentioned has to have name of the configuration file as parameter, ensure the file exists on the master node file system.</p>

<pre><code>--authentication-token-webhook-config-file string
File with webhook configuration for token authentication in kubeconfig format. The API server will query the remote service to determine authentication for bearer tokens.
</code></pre>

<p>The directory for the manifests is defined by kubelet option <code>--pod-manifest-path</code> and can be found using command:</p>

<pre><code>$ ps aux | grep kubelet
</code></pre>

<p>You can find more information about life cycle of such pods in <a href="https://kubernetes.io/docs/tasks/administer-cluster/static-pod/" rel="nofollow noreferrer">Kubernetes documentation</a></p>
