mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-02-19 04:00:11 -03:30
feat: make kubernetes owner parametrized (#8952)
* feat: make kubernetes owner parametrized * docs: update hardening guide with configuration for CIS 1.1.19 * fix: set etcd data directory permissions to be compliant to CIS 1.1.12
This commit is contained in:
@@ -1,4 +1,5 @@
|
||||
---
|
||||
kube_owner: kube
|
||||
kube_cert_group: kube-cert
|
||||
etcd_data_dir: "/var/lib/etcd"
|
||||
|
||||
|
||||
@@ -13,3 +13,4 @@
|
||||
shell: "{{ user.shell|default(omit) }}"
|
||||
name: "{{ user.name }}"
|
||||
system: "{{ user.system|default(omit) }}"
|
||||
when: kube_owner != "root"
|
||||
|
||||
Reference in New Issue
Block a user