kubespray/docs
Arthur Outhenin-Chalandre 4a6eb7eaa2
enable back kubelet_authorization_mode_webhook by default (#9662)
In 6db6c8678c, this was disabled becaue
kubesrpay gave too much permissions that were not needed. This commit
re-enable back this option by default and also removes the extra
permissions that kubespray gave that were in fact not needed.

Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>

Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
2023-01-16 23:56:32 -08:00
..
calico_peer_example add support for Calico BGPPeer sourceAddress (#8306) 2021-12-20 01:51:25 -08:00
figures rename almost all mentions of kargo 2017-06-16 13:25:46 -04:00
img feat: add kubelet systemd service hardening option (#9194) 2022-08-30 11:18:55 -07:00
ingress_controller Minor cleanup of README.md and two other docs (#9621) 2023-01-03 02:51:31 -08:00
kubernetes-apps Update local-volume-provisioner (#9463) 2022-11-07 15:28:17 -08:00
upgrades Amend documentation for docker to containerd migration (#8477) 2022-02-02 00:46:22 -08:00
_sidebar.md Add support for the OpenEuler Linux (#9494) 2022-11-16 00:48:49 -08:00
amazonlinux.md Fix wording in amazonlinux.md 2023-01-03 10:27:59 +01:00
ansible.md Minor cleanup of README.md and two other docs (#9621) 2023-01-03 02:51:31 -08:00
arch.md arm64 support of cilium (#8803) 2022-05-10 02:55:43 -07:00
aws-ebs-csi.md the KUESPRAYDIR defined but never used (#8930) 2022-06-06 07:42:23 -07:00
aws.md Rename ansible groups to use _ instead of - (#7552) 2021-04-29 05:20:50 -07:00
azure-csi.md add pre-commit hook to facilitate local testing (#9158) 2022-08-24 06:54:03 -07:00
azure.md add pre-commit hook to facilitate local testing (#9158) 2022-08-24 06:54:03 -07:00
bootstrap-os.md add pre-commit hook to facilitate local testing (#9158) 2022-08-24 06:54:03 -07:00
calico.md doc: don't set calico_vxlan_mode_ipv6=vxlanAlways when kernel < 3.12 (#9645) 2023-01-16 12:32:09 -08:00
centos.md Add check_typo job (#9361) 2022-10-07 02:21:53 -07:00
cert_manager.md cert-manager: add trusted internal ca when configured (#8135) 2021-11-05 09:43:52 -07:00
cgroups.md optimize cgroups settings for node reserved (#9209) 2022-12-30 08:05:30 -08:00
ci-setup.md Various documentation updates (#8243) 2021-11-29 15:05:21 -08:00
ci.md add-test-for-rockylinux9-cilium (#9562) 2023-01-07 02:35:26 -08:00
cilium.md Add switch cilium_enable_bandwidth_manager (#9441) 2022-10-28 03:08:31 -07:00
cinder-csi.md Rename ansible groups to use _ instead of - (#7552) 2021-04-29 05:20:50 -07:00
cloud.md Add markdown CI (#5380) 2019-12-04 07:22:57 -08:00
cni.md Add markdown CI (#5380) 2019-12-04 07:22:57 -08:00
comparisons.md doc: Update 'Kubespray vs Kubeadm' (#7834) 2021-07-28 03:15:34 -07:00
containerd.md [containerd] Simplify limiting number of open files per container (#9319) 2022-11-08 06:44:32 -08:00
cri-o.md Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable (#8317) 2022-02-22 08:53:16 -08:00
debian.md add pre-commit hook to facilitate local testing (#9158) 2022-08-24 06:54:03 -07:00
dns-stack.md feat(coredns): Forward extra domains to coredns kubernetes plugin (#9635) 2023-01-05 06:57:58 -08:00
docker.md Fix some typos in docs file (#9619) 2022-12-27 18:13:28 -08:00
downloads.md Remove warning about Docker-only support (#7626) 2021-05-20 00:01:05 -07:00
encrypting-secret-data-at-rest.md Encrypting Secret Data at Rest (#8574) 2022-02-23 03:04:18 -08:00
equinix-metal.md Update docs for using venv (#8842) 2022-05-19 23:39:12 -07:00
etcd.md Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable (#8317) 2022-02-22 08:53:16 -08:00
fcos.md add pre-commit hook to facilitate local testing (#9158) 2022-08-24 06:54:03 -07:00
flannel.md Feature/add flannel wireguard encryption backend as option (#9583) 2022-12-18 15:39:43 -08:00
flatcar.md Document host_resolvconf as default value for resolvconf_mode (#8493) 2022-01-31 03:12:24 -08:00
gcp-lb.md add pre-commit hook to facilitate local testing (#9158) 2022-08-24 06:54:03 -07:00
gcp-pd-csi.md Rename ansible groups to use _ instead of - (#7552) 2021-04-29 05:20:50 -07:00
getting-started.md docs: remove basic auth reference in getting-started (#7823) 2021-11-19 14:49:23 -08:00
gvisor.md gVisor: initial support for gVisor container runtime (#7661) 2021-06-21 05:18:51 -07:00
ha-mode.md [kubernetes] drop support for configuring insecure apiserver 2022-06-15 00:57:20 -07:00
hardening.md enable back kubelet_authorization_mode_webhook by default (#9662) 2023-01-16 23:56:32 -08:00
integration.md add pre-commit hook to facilitate local testing (#9158) 2022-08-24 06:54:03 -07:00
kata-containers.md doc: write how to use kata-container for pods (#8817) 2022-05-13 23:15:18 -07:00
kube-ovn.md Rename ansible groups to use _ instead of - (#7552) 2021-04-29 05:20:50 -07:00
kube-router.md Add markdown CI (#5380) 2019-12-04 07:22:57 -08:00
kube-vip.md Add enableServicesElection env variable. (#9595) 2023-01-02 18:35:33 -08:00
kubernetes-reliability.md Docs: Replace master with control plane (#7767) 2021-07-01 00:55:55 -07:00
kylinlinux.md Add docker support for Kylin V10 (#9144) 2022-08-03 15:03:46 -07:00
large-deployments.md Revert "Fix: typos in docs and comments (#7805)" (#8592) 2022-03-02 11:57:13 -08:00
macvlan.md Rename ansible groups to use _ instead of - (#7552) 2021-04-29 05:20:50 -07:00
metallb.md Fix typos in docs (#9276) 2022-09-15 00:09:22 -07:00
mirror.md mirror-for-china 2022-10-18 09:17:42 +02:00
mitogen.md [mitogent] update to 0.3.2 (#8470) 2022-01-27 08:36:59 -08:00
multus.md Update cni spec to 0.4.0 for network plugin allowing it (#6053) 2020-05-06 11:13:09 -07:00
netcheck.md netchecker: update images to 1.2.2 from Mirantis (#8074) 2021-10-19 10:17:04 -07:00
nodes.md fix one bug in docs/nodes (#9203) 2022-08-22 23:17:23 -07:00
ntp.md Fix typos in docs (#9276) 2022-09-15 00:09:22 -07:00
offline-environment.md Fix pathes of offline tool on the doc (#9486) 2022-11-14 01:27:57 -08:00
openeuler.md Add docker support for openEuler linux (#9498) 2022-11-17 18:18:30 -08:00
openstack.md feat(docs/openstack.md): Put Additional step needed when using calico or kube-router in own section (#9320) 2022-09-24 13:00:04 -07:00
opensuse.md Fix CI for Fedora (followup) + OpenSUSE Leap (update to 15.3) (#8407) 2022-01-24 23:24:30 -08:00
proxy.md Docs: Replace master with control plane (#7767) 2021-07-01 00:55:55 -07:00
recover-control-plane.md Docs: Replace master with control plane (#7767) 2021-07-01 00:55:55 -07:00
rhel.md Add RHEL support subscription registration (#6572) 2020-11-24 08:33:00 -08:00
roadmap.md Various documentation updates (#8243) 2021-11-29 15:05:21 -08:00
setting-up-your-first-cluster.md fix error link kubernetes url (#9475) 2022-11-10 05:42:55 -08:00
test_cases.md Docs: Replace master with control plane (#7767) 2021-07-01 00:55:55 -07:00
uoslinux.md Add UOS linux support (#9432) 2022-10-30 17:16:43 -07:00
upgrades.md Update docs for using venv (#8842) 2022-05-19 23:39:12 -07:00
vagrant.md add pre-commit hook to facilitate local testing (#9158) 2022-08-24 06:54:03 -07:00
vars.md Fix docs for node_labels (#9471) 2022-11-09 04:46:12 -08:00
vsphere-csi.md Move back vsphere csi to kube-system ns (#9312) 2022-09-23 10:46:26 -07:00
vsphere.md Corrected vsphere directory (#9534) 2022-12-01 22:13:54 -08:00
weave.md Rename ansible groups to use _ instead of - (#7552) 2021-04-29 05:20:50 -07:00