Update microk8s howto docs
@@ -9,6 +9,20 @@ MicroK8s and the Krustlet, on a single machine. `kubectl` is required but is ins
as `microk8s.kubectl`. The following instructions use `microk8s.kubectl` for simplicity.
You may use a standlone `kubectl` if you prefer.
+In order for the bootstrap authentication token to work, your kube-apiserver needs to have
+the `--enable-bootstrap-token-auth`
+(see [bootstrap-tokens](https://kubernetes.io/docs/reference/access-authn-authz/bootstrap-tokens/)).
+To verify you have it enabled, check the process args:
+```bash
+$ ps -ef | grep kube-apiserver | grep "enable-bootstrap-token-auth"
+```
+If it doesn't show up and you installed using `snap` you can find the startup args in
+`/var/snap/microk8s/current/args/kube-apiserver` and add the flag. Now you need to
+[restart](https://microk8s.io/docs/configuring-services) the kube-apiserver with the command:
+```bash
+systemctl restart snap.microk8s.daemon-apiserver
+```
+
## Step 1: Get a bootstrap config
Krustlet requires a bootstrap token and config the first time it runs. Follow the guide
