From 30b89e15985b7659b11c0811331ba6bb97ac0a1c Mon Sep 17 00:00:00 2001
From: Jerry Sun <jerry.sun@windriver.com>
Date: Wed, 17 Jul 2019 09:13:29 -0400
Subject: [PATCH] Add OpenID connect params to kubeadm

This commit modifies the kubeadm template to support OpenID connect
params.

Depends-On: https://review.opendev.org/671259

Story: 2006235
Task: 35836

Change-Id: I38f736aa68f9c0031ed697cdf17cd28ed08cadf6
Signed-off-by: Jerry Sun <jerry.sun@windriver.com>
---
 .../src/modules/platform/templates/kubeadm.yaml.erb            | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/puppet-manifests/src/modules/platform/templates/kubeadm.yaml.erb b/puppet-manifests/src/modules/platform/templates/kubeadm.yaml.erb
index 00d6a2f4d1..38c5f270ff 100644
--- a/puppet-manifests/src/modules/platform/templates/kubeadm.yaml.erb
+++ b/puppet-manifests/src/modules/platform/templates/kubeadm.yaml.erb
@@ -15,6 +15,9 @@ apiServer:
   extraArgs:
     default-not-ready-toleration-seconds: "30"
     default-unreachable-toleration-seconds: "30"
+    oidc-client-id: <%= @apiserver_oidc_client_id %>
+    oidc-issuer-url: <%= @apiserver_oidc_issuer_url %>
+    oidc-username-claim: <%= @apiserver_oidc_username_claim %>
 controllerManager:
   extraArgs:
     node-monitor-period: "2s"