epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-28 09:39:12 +03:00
Code Issues Packages Projects Releases Wiki Activity

feat: make kubernetes owner parametrized (#8952)

Browse Source 
* feat: make kubernetes owner parametrized

* docs: update hardening guide with configuration for CIS 1.1.19

* fix: set etcd data directory permissions to be compliant to CIS 1.1.12
This commit is contained in:
Alessio Greggi
2022-06-17 10:34:32 +02:00
committed by GitHub
parent 890fad389d
commit 97b4d79ed5
17 changed files with 40 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
roles/kubernetes/preinstall/defaults/main.yml
View File

@@ -22,6 +22,7 @@ common_required_pkgs:
# GCE docker repository
disable_ipv6_dns: false
kube_owner: kube
kube_cert_group: kube-cert
kube_config_dir: /etc/kubernetes
kube_cert_dir: "{{ kube_config_dir }}/ssl"