Support for specifying parameters to the api server

[ivansoban]

In order to specify the authorization mode for a Kubernetes master, the --authorization-mode command line parameter needs to be able to be set via kops edit cluster or some similar method.

[chrislovecnm]

@justinsb / @ivansoban is this still open?

[zapman449]

@chrislovecnm would an approach like #618 (comment) allow you to specify the arguments needed?

This ignores how to actually retrieve the --authorization-policy-file (presumably from KOPS_STATE_STORE)... but that's probably solvable.

[justinsb]

We actually have now mapped the authorization-mode flag.

You can set it like this (IIRC) in kops edit cluster, if you are using kops 1.5.0 beta1 or above:

...
spec:
  kubeAPIServer:
    authorizationMode: rbac

We still hope / intend to create a full example or drop-in for auth, particularly with rbac leaving alpha in 1.6, but in the meantime we are exposing the flags so kops is not the blocker any more!

Closing, but do comment/reopen (or open a new issue) if this doesn't work for you!