Differences

This shows you the differences between two versions of the page.

--- управление_доступом_в_kubernetes [2026/06/15 11:20]
val [Шаг 7. Использование OpenID Connect]
+++ управление_доступом_в_kubernetes [2026/06/15 14:46] (current)
val [Шаг 7. Использование OpenID Connect]
@@ Line 180: / Line 180: @@
 ...
 </code><code>
-kube1:~# ps ax | grep kube-apiserver
+kube1:~# ps ax | grep kube-apiserver  #  |grep keycloak
 kube1:~# journalctl -f | grep kube-apiserver
@@ Line 188: / Line 188: @@
 Error: unknown flag: --oidc-client-secret
 ...
-E1203 05:22:46.412571       1 authentication.go:73] "Unable to authenticate the request" err="[invalid bearer token, oidc: verify token: oidc: expected audience \"any-client\" got [\"account\"]]"
+E1203 05:22:46.412571       1 authentication.go:73] "Unable to authenticate the request"
+  err="[invalid bearer token, oidc: verify token: oidc: expected audience \"any-client\" got [\"account\"]]"
 ...
-E1218 10:36:21.105422       1 authentication.go:75] "Unable to authenticate the request" err="[invalid bearer token, oidc: email not verified]"
+E1218 10:36:21.105422       1 authentication.go:75] "Unable to authenticate the request"
+  err="[invalid bearer token, oidc: email not verified]"
 ...
 </code>
@@ Line 207: / Line 209: @@
 ...
 users:
-- name: user1
+#...
+- name: user1-token
   user:
     auth-provider:

Методические материалы Лохтурова Вячеслава