Thanks Theresa for following up. I have created a review with your source file here: https://review.opendev.org/#/c/712111/ Apologies for not adding you as a reviewer till now. I am new to this role and I welcome feedback from you and Jerry about how to move forward with the review. thanks, Mary Camp PTIGlobal Technical Writer | maryx.camp@intel.com<mailto:maryx.camp@intel.com> From: Ho, Teresa <Teresa.Ho@windriver.com> Sent: Tuesday, March 17, 2020 8:43 AM To: starlingx-discuss@lists.starlingx.io; Camp, MaryX <maryx.camp@intel.com> Subject: RE: additional stx docs input:2006711 Hi, Additional doc info, regarding oidc-auth shell script, is provided in the attached file which was previously sent. Thanks, Teresa From: Sun, Yicheng (Jerry) [mailto:Jerry.Sun@windriver.com] Sent: Tuesday, March 10, 2020 4:11 PM To: starlingx-discuss@lists.starlingx.io<mailto:starlingx-discuss@lists.starlingx.io>; maryx.camp@intel.com<mailto:maryx.camp@intel.com> Subject: [Starlingx-discuss] stx docs input:2006711 Hi All, We have just added the ability to configure oidc auth related parameters post-bootstrap: system service-parameter-add kubernetes kube_apiserver oidc_client_id=value system service-parameter-add kubernetes kube_apiserver oidc_groups_claim=value system service-parameter-add kubernetes kube_apiserver oidc_issuer_url=value system service-parameter-add kubernetes kube_apiserver oidc_username_claim=value they used to be configurable only at boostrap time in localhost.yml: apiserver_oidc: client_id: stx-oidc-client-app issuer_url: https://<oam-floating-ip>:30556/dex<https://%3coam-floating-ip%3e:30556/dex> username_claim: email groups_claim: group Apply the service parameters with "system service-parameter-apply kubernetes", or no changes will take place. The valid configurations for the service parameters are the same as during bootstrap: none of the parameters or oidc_issuer_url, oidc_client_id, oidc_username_claim or the above 3 and oidc_groups_claim Thanks, Jerry