External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-01 17:48:12 -03:30
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1382 from jwfang/rbac

Browse Source 
basic rbac support
This commit is contained in:
Brad Beam
2017-08-07 08:01:51 -05:00
committed by GitHub
parent 6eacedc443 805d9f22ce
commit 383d582b47
35 changed files with 450 additions and 105 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
docs/vars.md
View File

@@ -67,6 +67,11 @@ following default cluster paramters:
OpenStack (default is unset)
* *kube_hostpath_dynamic_provisioner* - Required for use of PetSets type in
Kubernetes
* *authorization_modes* - A list of [authorization mode](
https://kubernetes.io/docs/admin/authorization/#using-flags-for-your-authorization-module)
that the cluster should be configured for. Defaults to `[]` (i.e. no authorization).
Note: `RBAC` is currently in experimental phase, and do not support either calico or
vault. Upgrade from non-RBAC to RBAC is not tested.
Note, if cloud providers have any use of the ``10.233.0.0/16``, like instances'
private addresses, make sure to pick another values for ``kube_service_addresses``