Erwan Miran
|
b15e685a0b
|
sysctl related PodSecurityPolicy spec since 1.12 (#3743)
|
6 years ago |
Erwan Miran
|
80cfeea957
|
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
|
6 years ago |
Matthew Mosesohn
|
03bcfa7ff5
|
Stop templating kube-system namespace and creating it (#2545)
Kubernetes makes this namespace automatically, so there is
no need for kubespray to manage it.
|
6 years ago |
MQasimSarfraz
|
9a4aa4288c
|
Fix vsphere cloud_provider RBAC permissions
|
6 years ago |
chadswen
|
b0ab92c921
|
Prefix system:node CRB
Change the name of `system:node` CRB to `kubespray:system:node` to avoid
conflicts with the auto-reconciled CRB also named `system:node`
Fixes #2121
|
6 years ago |
Jonas Kongslund
|
585303ad66
|
Start with three dashes for consistency
|
6 years ago |
|
Jonas Kongslund
|
a800ed094b
|
Added support for webhook authentication/authorization on the secure kubelet endpoint
|
6 years ago |
Matthew Mosesohn
|
ec53b8b66a
|
Move cluster roles and system namespace to new role
This should be done after kubeconfig is set for admin and
before network plugins are up.
|
7 years ago |
