From 6491fd195bf6d0a4c4378de01dc1d5e1d7d6d078 Mon Sep 17 00:00:00 2001 From: Jake Sanders Date: Wed, 15 May 2019 18:39:51 -0700 Subject: [PATCH] add PR & attribution to 1.14 RBAC discovery change --- CHANGELOG-1.14.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG-1.14.md b/CHANGELOG-1.14.md index d54038e304..ce7e7208df 100644 --- a/CHANGELOG-1.14.md +++ b/CHANGELOG-1.14.md @@ -285,6 +285,7 @@ kubernetes/enhancements: [kep](https://github.com/kubernetes/enhancements/blob/m - Default RBAC policy no longer grants access to discovery and permission-checking APIs (used by `kubectl auth can-i`) to *unauthenticated* users. Upgraded clusters preserve prior behavior, but cluster administrators wishing to grant unauthenticated users access in new clusters will need to explicitly opt-in to expose the discovery and/or permission-checking APIs: - `kubectl create clusterrolebinding anonymous-discovery --clusterrole=system:discovery --group=system:unauthenticated` - `kubectl create clusterrolebinding anonymous-access-review --clusterrole=system:basic-user --group=system:unauthenticated` + ([#73807](https://github.com/kubernetes/kubernetes/pull/73807), [@dekkagaijin](https://github.com/dekkagaijin)) - The deprecated --storage-versions flag has been removed. The storage versions will always be the default value built-in the kube-apiserver binary. ([#67678](https://github.com/kubernetes/kubernetes/pull/67678), [@caesarxuchao](https://github.com/caesarxuchao)) - The deprecated `--repair-malformed-updates` flag has been removed ([#73663](https://github.com/kubernetes/kubernetes/pull/73663), [@danielqsj](https://github.com/danielqsj)) - The `/swaggerapi/*` schema docs, deprecated since 1.7, have been removed in favor of the /openapi/v2 schema docs. ([#72924](https://github.com/kubernetes/kubernetes/pull/72924), [@liggitt](https://github.com/liggitt))