Merge pull request #911 from bogdando/DROP_CAPS

Drop linux capabilities and rework users/groups
This commit is contained in:
Bogdan Dobrelya
2017-02-06 12:05:51 +01:00
committed by GitHub
48 changed files with 413 additions and 81 deletions

View File

@@ -23,6 +23,12 @@
- include: set_facts.yml
tags: facts
- include: set_resolv_facts.yml
tags: [bootstrap-os, resolvconf, facts]
- include: set_uid_facts.yml
tags: [bootstrap-os, facts]
- name: gather os specific variables
include_vars: "{{ item }}"
with_first_found:
@@ -42,7 +48,7 @@
file:
path: "{{ kube_config_dir }}"
state: directory
owner: kube
owner: "{{ kubelet_user }}"
when: "{{ inventory_hostname in groups['k8s-cluster'] }}"
tags: [kubelet, k8s-secrets, kube-controller-manager, kube-apiserver, bootstrap-os, apps, network, master, node]
@@ -50,7 +56,7 @@
file:
path: "{{ kube_script_dir }}"
state: directory
owner: kube
owner: "{{ kubelet_user }}"
when: "{{ inventory_hostname in groups['k8s-cluster'] }}"
tags: [k8s-secrets, bootstrap-os]
@@ -58,7 +64,7 @@
file:
path: "{{ kube_manifest_dir }}"
state: directory
owner: kube
owner: "{{ kubelet_user }}"
when: "{{ inventory_hostname in groups['k8s-cluster'] }}"
tags: [kubelet, bootstrap-os, master, node]
@@ -80,7 +86,7 @@
file:
path: "{{ item }}"
state: directory
owner: kube
owner: "{{ kubelet_user }}"
with_items:
- "/etc/cni/net.d"
- "/opt/cni/bin"