Joel Seguillon
|
4c1e0b188d
|
Add .editorconfig file (#6307)
|
4 years ago |
Wang Zhen
|
d62836f2ab
|
Replace seccomp profile docker/default with runtime/default (#6170)
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
|
4 years ago |
Pasquale Toscano
|
00efc63f74
|
Customize PodSecurityPolicies from inventory (#5920)
* Customize PodSecurityPolicies from inventory
* Fixed yaml indentation
|
4 years ago |
Florian Ruynat
|
b5125e59ab
|
update rbac.authorization.k8s.io to non deprecated api-groups (#5517)
|
4 years ago |
Anshul Sharma
|
79a6b72a13
|
Removed deprecated label kubernetes.io/cluster-service (#5372)
|
4 years ago |
刘旭
|
de9443a694
|
remove unused code (#4981)
|
5 years ago |
rptaylor
|
5bec2edaf7
|
remove namespace from ClusterRole (#4856)
|
5 years ago |
Matthew Mosesohn
|
f504d0ea99
|
Remove invalid field dnsPolicy from podSecurityPolicy (#4863)
Change-Id: I02864011bf5fda5dbd35c7513c73875769036f87
|
5 years ago |
Andreas Krüger
|
818aa7aeb1
|
Set dnsPolicy to ClusterFirstWithHostNet when hostNetwork is true (#4843)
|
5 years ago |
Erwan Miran
|
b15e685a0b
|
sysctl related PodSecurityPolicy spec since 1.12 (#3743)
|
6 years ago |
Erwan Miran
|
80cfeea957
|
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
|
6 years ago |
|
Matthew Mosesohn
|
03bcfa7ff5
|
Stop templating kube-system namespace and creating it (#2545)
Kubernetes makes this namespace automatically, so there is
no need for kubespray to manage it.
|
6 years ago |
MQasimSarfraz
|
9a4aa4288c
|
Fix vsphere cloud_provider RBAC permissions
|
6 years ago |
chadswen
|
b0ab92c921
|
Prefix system:node CRB
Change the name of `system:node` CRB to `kubespray:system:node` to avoid
conflicts with the auto-reconciled CRB also named `system:node`
Fixes #2121
|
6 years ago |
Jonas Kongslund
|
585303ad66
|
Start with three dashes for consistency
|
6 years ago |
|
Jonas Kongslund
|
a800ed094b
|
Added support for webhook authentication/authorization on the secure kubelet endpoint
|
6 years ago |
Matthew Mosesohn
|
ec53b8b66a
|
Move cluster roles and system namespace to new role
This should be done after kubeconfig is set for admin and
before network plugins are up.
|
7 years ago |
