Reviewed: https://review.openstack.org/556213 Committed: https://git.openstack.org/cgit/openstack/magnum/commit/?id=205e8adafaf883e6dc81177eee3fa08d12b26f77 Submitter: Zuul Branch: master
commit 205e8adafaf883e6dc81177eee3fa08d12b26f77 Author: Spyros Trigazis <email address hidden> Date: Sun Mar 25 14:47:37 2018 +0000
k8s_fedora: Add kubelet authentication/authorization
* disable kubelet anonymous-auth * enable kubelet webhook-(token) authorization * disable kubelet cadvisor and read-only ports * listen kubelet only on internal ipv4 ip * update kubelet certs * Update heapster RBAC to access kubelets * update api config to access kubelet over https
Closes-Bug: #1758672 Change-Id: I2c6046ce5921a63a2d56f51435433497b1ff30ba
Reviewed: https:/ /review. openstack. org/556213 /git.openstack. org/cgit/ openstack/ magnum/ commit/ ?id=205e8adafaf 883e6dc81177eee 3fa08d12b26f77
Committed: https:/
Submitter: Zuul
Branch: master
commit 205e8adafaf883e 6dc81177eee3fa0 8d12b26f77
Author: Spyros Trigazis <email address hidden>
Date: Sun Mar 25 14:47:37 2018 +0000
k8s_fedora: Add kubelet authentication/ authorization
* disable kubelet anonymous-auth
* enable kubelet webhook-(token) authorization
* disable kubelet cadvisor and read-only ports
* listen kubelet only on internal ipv4 ip
* update kubelet certs
* Update heapster RBAC to access kubelets
* update api config to access kubelet over https
Closes-Bug: #1758672 3a2d56f51435433 497b1ff30ba
Change-Id: I2c6046ce5921a6