rptaylor
|
5bec2edaf7
|
remove namespace from ClusterRole (#4856)
|
2019-06-10 11:15:12 -07:00 |
Matthew Mosesohn
|
f504d0ea99
|
Remove invalid field dnsPolicy from podSecurityPolicy (#4863)
Change-Id: I02864011bf5fda5dbd35c7513c73875769036f87
|
2019-06-10 07:11:10 -07:00 |
Andreas Krüger
|
818aa7aeb1
|
Set dnsPolicy to ClusterFirstWithHostNet when hostNetwork is true (#4843)
|
2019-06-05 03:17:55 -07:00 |
Erwan Miran
|
b15e685a0b
|
sysctl related PodSecurityPolicy spec since 1.12 (#3743)
|
2018-11-26 00:13:51 -08:00 |
Erwan Miran
|
80cfeea957
|
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
|
2018-08-22 18:16:13 +02:00 |
|
Matthew Mosesohn
|
03bcfa7ff5
|
Stop templating kube-system namespace and creating it (#2545)
Kubernetes makes this namespace automatically, so there is
no need for kubespray to manage it.
|
2018-03-30 14:29:13 +03:00 |
MQasimSarfraz
|
9a4aa4288c
|
Fix vsphere cloud_provider RBAC permissions
|
2018-03-12 18:07:08 +00:00 |
chadswen
|
b0ab92c921
|
Prefix system:node CRB
Change the name of `system:node` CRB to `kubespray:system:node` to avoid
conflicts with the auto-reconciled CRB also named `system:node`
Fixes #2121
|
2018-03-08 23:56:46 -06:00 |
Jonas Kongslund
|
585303ad66
|
Start with three dashes for consistency
|
2018-03-03 10:05:05 +04:00 |
|
Jonas Kongslund
|
a800ed094b
|
Added support for webhook authentication/authorization on the secure kubelet endpoint
|
2018-03-03 10:00:09 +04:00 |
Matthew Mosesohn
|
ec53b8b66a
|
Move cluster roles and system namespace to new role
This should be done after kubeconfig is set for admin and
before network plugins are up.
|
2017-10-26 14:36:05 +01:00 |