Comment 3 for bug 1758672

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to magnum (master)

Reviewed: https://review.openstack.org/556213
Committed: https://git.openstack.org/cgit/openstack/magnum/commit/?id=205e8adafaf883e6dc81177eee3fa08d12b26f77
Submitter: Zuul
Branch: master

commit 205e8adafaf883e6dc81177eee3fa08d12b26f77
Author: Spyros Trigazis <email address hidden>
Date: Sun Mar 25 14:47:37 2018 +0000

    k8s_fedora: Add kubelet authentication/authorization

    * disable kubelet anonymous-auth
    * enable kubelet webhook-(token) authorization
    * disable kubelet cadvisor and read-only ports
    * listen kubelet only on internal ipv4 ip
    * update kubelet certs
    * Update heapster RBAC to access kubelets
    * update api config to access kubelet over https

    Closes-Bug: #1758672
    Change-Id: I2c6046ce5921a63a2d56f51435433497b1ff30ba