kube-apiserver

• https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/

kube-apiserver --authorization-mode=Example,RBAC --other-options --more-options

--enable-admission-plugins (list of plugins enabled)
--allow-privileged=true (default false)
--anonymous-auth     Default: true
--authorization-mode Ordered list of plug-ins to do authorization on secure port. Defaults to AlwaysAllow if --authorization-config is not used. Comma-delimited list of: AlwaysAllow,AlwaysDeny,ABAC,Webhook,RBAC,Node.
--cors-allowed-origins

EKS logs

• aws logs tail --follow /aws/eks/you-cluster-name/cluster | egrep ("kube-apiserver-audit | kube-apiserver | authenticator | kube-controller-manager | cloud-controller-manager")

Failed to make webhook authenticator request: unknown

Related

• Kubernetes API Server
• --event-ttl
• kubelet
• kube-apiserver-admission
• snap info kube-apiserver

See also

• Kubernetes API Server, kube-apiserver, system:bootstrappers, --event-ttl, --enable-admission-plugins, snap info kube-apiserver
• Kubernetes API, Kubernetes API server, EKS API, apiVersion:, kubectl api-resources, kubectl api-versions, kind:, Kubernetes API endpoint, 6443, 10250 (kubelet) kube-apiserver, /etc/kubernetes/manifests/kube-apiserver.yaml, valueFrom, /var/log/kube-apiserver.log, /api/v1/, k8s.io, API Priority and Fairness

https://kubernetes.io/docs/reference/access-authn-authz/rbac/