You can configure how the Argo Server authenticates to Kubernetes:
server
: In hosted mode, use the Server's Service Account. In local mode, use your local kube config.client
: Use the Kubernetes bearer token of clients.sso
: Use single sign-on. This will use the same SA asserver
for RBAC, unless you have enabled SSO RBAC
For v3.0 and after, the default is client
. Prior to v3.0, it was server
.
To configure the Server's auth modes, use one or multiple --auth-mode
flags. For example:
argo server --auth-mode=sso --auth-mode=client