External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-19 12:10:11 -03:30
Code Issues Packages Projects Releases Wiki Activity

Security best practice fixes (#1783)

Browse Source 
* Disable basic and token auth by default

* Add recommended security params

* allow basic auth to fail in tests

* Enable TLS authentication for kubelet
This commit is contained in:
Matthew Mosesohn
2017-10-15 20:41:17 +01:00
committed by GitHub
parent 66e5e14bac
commit d487b2f927
9 changed files with 23 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
inventory/group_vars/k8s-cluster.yml
View File

@@ -50,8 +50,8 @@ kube_users:
## It is possible to activate / deactivate selected authentication methods (basic auth, static token auth)
#kube_oidc_auth: false
#kube_basic_auth: true
#kube_token_auth: true
#kube_basic_auth: false
#kube_token_auth: false
## Variables for OpenID Connect Configuration https://kubernetes.io/docs/admin/authentication/