From d58343d201714f9651916e0d6996822a1194335c Mon Sep 17 00:00:00 2001
From: Mathieu Parent <mathieu.parent@insee.fr>
Date: Tue, 9 Apr 2024 12:34:36 +0200
Subject: [PATCH] Document "Remove access to cluster from anonymous users"
 (#11068)

See https://github.com/kubernetes-sigs/kubespray/pull/11016
---
 docs/hardening.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/hardening.md b/docs/hardening.md
index 8623bdc30..77d70f9b6 100644
--- a/docs/hardening.md
+++ b/docs/hardening.md
@@ -71,6 +71,8 @@ kube_apiserver_admission_event_rate_limits:
     qps: 50
     burst: 100
 kube_profiling: false
+# Remove anonymous access to cluster
+remove_anonymous_access: true
 
 ## kube-controller-manager
 kube_controller_manager_bind_address: 127.0.0.1