Browse Source

Prefix system:node CRB

Change the name of `system:node` CRB to `kubespray:system:node` to avoid
conflicts with the auto-reconciled CRB also named `system:node`

Fixes #2121
pull/2444/head
chadswen 7 years ago
parent
commit
b0ab92c921
2 changed files with 2 additions and 2 deletions
  1. 2
      roles/kubernetes-apps/cluster_roles/tasks/main.yml
  2. 2
      roles/kubernetes-apps/cluster_roles/templates/node-crb.yml.j2

2
roles/kubernetes-apps/cluster_roles/tasks/main.yml

@ -20,7 +20,7 @@
- name: Apply workaround to allow all nodes with cert O=system:nodes to register
kube:
name: "system:node"
name: "kubespray:system:node"
kubectl: "{{bin_dir}}/kubectl"
resource: "clusterrolebinding"
filename: "{{ kube_config_dir }}/node-crb.yml"

2
roles/kubernetes-apps/cluster_roles/templates/node-crb.yml.j2

@ -6,7 +6,7 @@ metadata:
rbac.authorization.kubernetes.io/autoupdate: "true"
labels:
kubernetes.io/bootstrapping: rbac-defaults
name: system:node
name: kubespray:system:node
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole

Loading…
Cancel
Save