kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
kubespray/roles/kubernetes-apps/cluster_roles/templates/node-crb.yml.j2

18 lines
408 B
Plaintext
Raw Permalink Normal View History

Make ClusterRoleBinding to admit all nodes with right cert (#1861) This is to work around #1856 which can occur when kubelet hostname and resolvable hostname (or cloud instance name) do not match.
2017-10-25 00:05:58 +08:00
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
annotations:
rbac.authorization.kubernetes.io/autoupdate: "true"
labels:
kubernetes.io/bootstrapping: rbac-defaults
Prefix system:node CRB Change the name of `system:node` CRB to `kubespray:system:node` to avoid conflicts with the auto-reconciled CRB also named `system:node` Fixes #2121
2018-03-09 13:56:46 +08:00
name: kubespray:system:node
Make ClusterRoleBinding to admit all nodes with right cert (#1861) This is to work around #1856 which can occur when kubelet hostname and resolvable hostname (or cloud instance name) do not match.
2017-10-25 00:05:58 +08:00
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:node
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: system:nodes