Comment 4 for bug 1758672

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to magnum (stable/queens)

Reviewed: https://review.openstack.org/556214
Committed: https://git.openstack.org/cgit/openstack/magnum/commit/?id=dba9203f6a62a32c24a6540ae37fcd5814b11b4a
Submitter: Zuul
Branch: stable/queens

commit dba9203f6a62a32c24a6540ae37fcd5814b11b4a
Author: Spyros Trigazis <email address hidden>
Date: Sun Mar 25 14:47:37 2018 +0000

    k8s_fedora: Add kubelet authentication/authorization

    * disable kubelet anonymous-auth
    * enable kubelet webhook-(token) authorization
    * disable kubelet cadvisor and read-only ports
    * listen kubelet only on internal ipv4 ip
    * update kubelet certs
    * Update heapster RBAC to access kubelets
    * update api config to access kubelet over https

    Closes-Bug: #1758672
    Change-Id: I2c6046ce5921a63a2d56f51435433497b1ff30ba