|
|
@@ -3753,7 +3753,7 @@
|
|
|
</tbody>
|
|
|
</table>
|
|
|
<h2 id="authentication">Authentication</h2>
|
|
|
-<p>To configure Robot Account federation, your cluster must have a publicly available <a href="https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery">OIDC service account issuer</a> endpoint for Quay to validate tokens against against. You can determine the issuer and subject fields by creating and decoding a service account token for the service account you wish to federate with (this is the service account you will use in <code>spec.serviceAccountRef</code>). For example, if federating with the <code>default</code> service account in the <code>default</code> namespace:</p>
|
|
|
+<p>To configure Robot Account federation, your cluster must have a publicly available <a href="https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery">OIDC service account issuer</a> endpoint for Quay to validate tokens against. You can determine the issuer and subject fields by creating and decoding a service account token for the service account you wish to federate with (this is the service account you will use in <code>spec.serviceAccountRef</code>). For example, if federating with the <code>default</code> service account in the <code>default</code> namespace:</p>
|
|
|
<p>Obtain issuer:</p>
|
|
|
<div class="highlight"><pre><span></span><code>kubectl<span class="w"> </span>create<span class="w"> </span>token<span class="w"> </span>default<span class="w"> </span>-n<span class="w"> </span>default<span class="w"> </span><span class="p">|</span><span class="w"> </span>cut<span class="w"> </span>-d<span class="w"> </span><span class="s1">'.'</span><span class="w"> </span>-f<span class="w"> </span><span class="m">2</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>sed<span class="w"> </span><span class="s1">'s/[^=]$/&==/'</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>base64<span class="w"> </span>-d<span class="w"> </span><span class="p">|</span><span class="w"> </span>jq<span class="w"> </span>-r<span class="w"> </span><span class="s1">'.iss'</span>
|
|
|
</code></pre></div>
|