# Set --requestheader-client-ca-file flag **URL:** \ **Category:** Rancher 2.0 Tech Preview\ **Created:** [May 9, 2018, 10:37am UTC](https://forums.suse.com/t/set-requestheader-client-ca-file-flag/10355 "2018-05-09T10:37:46Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![jonas](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/jonas/32/3245_2.png) [@jonas](https://forums.suse.com/u/jonas)\ **Post date:** [May 9, 2018, 10:37am UTC](https://forums.suse.com/t/set-requestheader-client-ca-file-flag/10355/1 "2018-05-09T10:37:47Z")
Hi, i am trying to get Stash from Appscode up and running on Rancher 2 (RKE). But it requires a flag on the apiserver: Set --requestheader-client-ca-file flag on Kubernetes apiserver Is it possible to add this on a running cluster?, or do i need to delete it, and create a new. In either way, how would i set this flag? ---
**Author:** ![Kusan\_Atukorala](https://avatars.discourse-cdn.com/v4/letter/k/9dc877/32.png) [@Kusan\_Atukorala](https://forums.suse.com/u/Kusan_Atukorala)\ **Post date:** [May 10, 2018, 7:40am UTC](https://forums.suse.com/t/set-requestheader-client-ca-file-flag/10355/2 "2018-05-10T07:40:01Z")
I am having the same problem enabling aggregation layer in kubernetes with Rancher 2.0? We need to setup additional flags on the kube-apiserver. Can someone please help? ---
**Author:** ![cjellick](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/cjellick/32/2876_2.png) [@cjellick](https://forums.suse.com/u/cjellick)\ **Post date:** [May 10, 2018, 4:45pm UTC](https://forums.suse.com/t/set-requestheader-client-ca-file-flag/10355/3 "2018-05-10T16:45:57Z")
I think you can do this via the `extra_args` config option: > **[GitHub - rancher/rke: Rancher Kubernetes Engine (RKE), an extremely simple,...](https://github.com/rancher/rke#extra-args-and-binds)** > > Rancher Kubernetes Engine (RKE), an extremely simple, lightning fast Kubernetes distribution that runs entirely within containers. - GitHub - rancher/rke: Rancher Kubernetes Engine (RKE), an extrem... ---
**Author:** ![Kusan\_Atukorala](https://avatars.discourse-cdn.com/v4/letter/k/9dc877/32.png) [@Kusan\_Atukorala](https://forums.suse.com/u/Kusan_Atukorala)\ **Post date:** [May 11, 2018, 3:30am UTC](https://forums.suse.com/t/set-requestheader-client-ca-file-flag/10355/4 "2018-05-11T03:30:21Z")
Hi @cjellick, Thank you. Have you any idea how i add the extra\_args config option, if i have created the cluster using the EC2 template on rancher 2 UI. Alternatively if i am to create the cluster again then how do i add this option through the UI. Or is there any other way ---
**Author:** ![cjellick](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/cjellick/32/2876_2.png) [@cjellick](https://forums.suse.com/u/cjellick)\ **Post date:** [May 11, 2018, 3:48pm UTC](https://forums.suse.com/t/set-requestheader-client-ca-file-flag/10355/5 "2018-05-11T15:48:45Z")
Shoot, I didn’t realize you were using RKE through the Rancher UI. I don’t think we expose that option. RKE is not my area of expertise. I’ll follow up with someone that has more expertise in the area or have them foillow up here. ---
**Author:** ![cjellick](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/cjellick/32/2876_2.png) [@cjellick](https://forums.suse.com/u/cjellick)\ **Post date:** [May 11, 2018, 4:30pm UTC](https://forums.suse.com/t/set-requestheader-client-ca-file-flag/10355/6 "2018-05-11T16:30:16Z")
Spoke with someone more knowledgeable. The ability to set this is in our API but not in the UI. The easiest thing to do is to create the cluster through the UI and then edit it in the API UI afterwards (once created, on the page that lists clusters, you should see three vertical dots that you can click on to open the cluster in the API). We still need to figure out the UX around exposing all the knobs and levers available for setting up kubernetes. It would be quite overwhelming to users if not presented properly. ---
**Author:** ![jonas](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/jonas/32/3245_2.png) [@jonas](https://forums.suse.com/u/jonas)\ **Post date:** [May 12, 2018, 11:25pm UTC](https://forums.suse.com/t/set-requestheader-client-ca-file-flag/10355/7 "2018-05-12T23:25:46Z")
@Kusan_Atukorala i just got around to looking into it, it took me a little time to figure it out, so if you havn’t gotten it to work, here is what i did. As @cjellick said, click “View in API” when clicking the 3 “dots” on the cluster. When the API opens, click “Edit” in the side bar. There are 3 text areas **amazonElasticContainerServiceConfig** , **azureKubernetesServiceConfig** , **googleKubernetesEngineConfig** these needs to be set to **null** After this go to the **rancherKubernetesEngineConfig** field in the bottom, and edit the JSON (Keep your tung in your mouth 😃 ) update **kubeApi** and add e.g.: **{“extraArgs”:{“foo”:“bar”}** this will set **–foo=bar** on the kubeapi after this show request, and send, then it should update the cluster and work. You can verify it by e.g. SSH into the master server and run: 1. docker exec -ti kubelet bash 2. ps faux | grep kubelet To see the kube-api arguments Feel free to poke me if you can’t get it to work i am **jonas** on Slack if that’s easier 🙂 ---
**Author:** ![cjellick](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/cjellick/32/2876_2.png) [@cjellick](https://forums.suse.com/u/cjellick)\ **Post date:** [May 14, 2018, 5:15pm UTC](https://forums.suse.com/t/set-requestheader-client-ca-file-flag/10355/8 "2018-05-14T17:15:37Z")
@jonas thanks for circling back and following up with explicit steps!