Commit Graph

17 Commits (df646dfed8e0c4b06365761ac52a11078fcb378d)

Author SHA1 Message Date
Łukasz Osipiuk 80e66596a5 Grant permissions for batch/job to cluster-autoscaler 2018-10-16 10:46:46 +02:00
Karol Gołąb f8fa60e9ea Limit access to configmaps 2018-06-08 18:02:37 +02:00
Karol Gołąb c70b554af9 Create system:cluster-autoscaler account & role and introduce it to CA start-up script 2018-06-08 14:15:52 +02:00
Jordan Liggitt c4e63cb777
gce: split legacy kubelet node role binding and bootstrapper role binding 2017-12-13 21:56:18 -05:00
Mike Danese 962e1e2f6d gce: readd kubelet-bootstrap to kubelet user 2017-11-14 13:46:08 -08:00
Mike Danese 3f7e1cccd2 don't add kubelet legacy binding if we aren't registering the master kubelet 2017-10-26 13:30:59 -07:00
Mike Danese 8b3a8adb17 reorganize rbac addon dir into subdirectories 2017-10-26 13:26:52 -07:00
Chen Rong d23df051e1 update to rbac v1 in yaml file 2017-08-21 17:29:37 +08:00
Jacob Simpson 334de1cbe1 Auto approve kubelet certificate signing requests. 2017-06-16 08:47:12 -07:00
CJ Cullen eba50dfeb6 Replace todo-grabbag binding w/ more specific heapster roles/bindings.
Move kubelet binding to the rbac folder.
2017-06-06 09:03:09 -07:00
Mike Danese ae91ecb62e enable tls bootstrap in GCE/GKE 2017-06-01 09:17:32 -07:00
Jordan Liggitt 87a8c21995
Give apiserver full access to kubelet API 2017-03-17 18:05:19 -04:00
Zihong Zheng d4fa046d56 Adds the new addon-manager labels on cluster addon templates 2017-02-24 16:53:12 -08:00
Jordan Liggitt 2a76fa1c8f
Switch RBAC subject apiVersion to apiGroup in v1beta1 2017-02-13 15:33:09 -05:00
Mike Danese c8ce55fef4 Revert "Merge pull request #41132 from kubernetes/revert-40893-kubelet-auth"
This reverts commit fd56078298, reversing
changes made to d953402cdf.
2017-02-09 15:55:12 -08:00
Aleksandra Malinowska 1841e5b2e0 Revert "remove second CA used for kubelet auth in favor of webhook auth" 2017-02-08 13:22:10 +01:00
Mike Danese 86d9493747 remove second CA used for kubelet auth in favor of webhook auth 2017-02-07 13:22:01 -08:00