epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2025-12-14 13:54:37 +03:00
Code Issues Packages Projects Releases Wiki Activity

change authorization_modes default value

Browse Source
This commit is contained in:
jwfang
2017-07-07 17:31:11 +08:00
parent 0b3badf3d8
commit 552b2f0635
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.gitlab-ci.yml
View File

@@ -62,7 +62,7 @@ before_script:
KUBELET_DEPLOYMENT: "docker" KUBELET_DEPLOYMENT: "docker"
VAULT_DEPLOYMENT: "docker" VAULT_DEPLOYMENT: "docker"
WEAVE_CPU_LIMIT: "100m" WEAVE_CPU_LIMIT: "100m"
AUTHORIZATION_MODES: "{ 'authorization_modes': ['AlwaysAllow'] }" AUTHORIZATION_MODES: "{ 'authorization_modes': [] }"
MAGIC: "ci check this" MAGIC: "ci check this"
.gce: &gce .gce: &gce

2
docs/vars.md
View File

@@ -69,7 +69,7 @@ following default cluster paramters:
Kubernetes Kubernetes
* *authorization_modes* - A list of [authorization mode]( * *authorization_modes* - A list of [authorization mode](
https://kubernetes.io/docs/admin/authorization/#using-flags-for-your-authorization-module) https://kubernetes.io/docs/admin/authorization/#using-flags-for-your-authorization-module)
that the cluster should be configured for. Defaults to `['AlwaysAllow']`. that the cluster should be configured for. Defaults to `[]` (i.e. no authorization).
Note: Only `AlwaysAllow`, `AlwaysDeny` and `RBAC` are tested. Note: Only `AlwaysAllow`, `AlwaysDeny` and `RBAC` are tested.
Note, if cloud providers have any use of the ``10.233.0.0/16``, like instances' Note, if cloud providers have any use of the ``10.233.0.0/16``, like instances'

2
roles/kubespray-defaults/defaults/main.yaml
View File

@@ -118,5 +118,5 @@ enable_network_policy: false
## List of authorization modes that must be configured for ## List of authorization modes that must be configured for
## the k8s cluster. Only 'AlwaysAllow','AlwaysDeny', and ## the k8s cluster. Only 'AlwaysAllow','AlwaysDeny', and
## 'RBAC' modes are tested. ## 'RBAC' modes are tested.
authorization_modes: ['AlwaysAllow'] authorization_modes: []
rbac_enabled: "{{ 'RBAC' in authorization_modes }}" rbac_enabled: "{{ 'RBAC' in authorization_modes }}"