Reviewed: https://review.openstack.org/556214 Committed: https://git.openstack.org/cgit/openstack/magnum/commit/?id=dba9203f6a62a32c24a6540ae37fcd5814b11b4a Submitter: Zuul Branch: stable/queens
commit dba9203f6a62a32c24a6540ae37fcd5814b11b4a Author: Spyros Trigazis <email address hidden> Date: Sun Mar 25 14:47:37 2018 +0000
k8s_fedora: Add kubelet authentication/authorization
* disable kubelet anonymous-auth * enable kubelet webhook-(token) authorization * disable kubelet cadvisor and read-only ports * listen kubelet only on internal ipv4 ip * update kubelet certs * Update heapster RBAC to access kubelets * update api config to access kubelet over https
Closes-Bug: #1758672 Change-Id: I2c6046ce5921a63a2d56f51435433497b1ff30ba
Reviewed: https:/ /review. openstack. org/556214 /git.openstack. org/cgit/ openstack/ magnum/ commit/ ?id=dba9203f6a6 2a32c24a6540ae3 7fcd5814b11b4a
Committed: https:/
Submitter: Zuul
Branch: stable/queens
commit dba9203f6a62a32 c24a6540ae37fcd 5814b11b4a
Author: Spyros Trigazis <email address hidden>
Date: Sun Mar 25 14:47:37 2018 +0000
k8s_fedora: Add kubelet authentication/ authorization
* disable kubelet anonymous-auth
* enable kubelet webhook-(token) authorization
* disable kubelet cadvisor and read-only ports
* listen kubelet only on internal ipv4 ip
* update kubelet certs
* Update heapster RBAC to access kubelets
* update api config to access kubelet over https
Closes-Bug: #1758672 3a2d56f51435433 497b1ff30ba
Change-Id: I2c6046ce5921a6