Remove cloud-config from k8s worker node
Now Magnum is not deploying any service or workload on k8s worker nodes which need to get credentials from local to talk to Magnum control plane. So the cloud-config file should be removed from worker nodes to reduce the attach surface from a security point of view. Task: 40791 Story: 2008090 Change-Id: I72e418491cbd19291527bbe4b504d599c740fea9
This commit is contained in:
parent
cbf0a3924c
commit
c84653cd74
|
@ -480,7 +480,6 @@ resources:
|
||||||
$CONTAINERD_TARBALL_SHA256: {get_param: containerd_tarball_sha256}
|
$CONTAINERD_TARBALL_SHA256: {get_param: containerd_tarball_sha256}
|
||||||
- get_file: ../../common/templates/kubernetes/fragments/install-cri.sh
|
- get_file: ../../common/templates/kubernetes/fragments/install-cri.sh
|
||||||
- get_file: ../../common/templates/kubernetes/fragments/install-clients.sh
|
- get_file: ../../common/templates/kubernetes/fragments/install-clients.sh
|
||||||
- get_file: ../../common/templates/kubernetes/fragments/write-kube-os-config.sh
|
|
||||||
- get_file: ../../common/templates/kubernetes/fragments/make-cert-client.sh
|
- get_file: ../../common/templates/kubernetes/fragments/make-cert-client.sh
|
||||||
- get_file: ../../common/templates/fragments/configure-docker-registry.sh
|
- get_file: ../../common/templates/fragments/configure-docker-registry.sh
|
||||||
- get_file: ../../common/templates/kubernetes/fragments/configure-kubernetes-minion.sh
|
- get_file: ../../common/templates/kubernetes/fragments/configure-kubernetes-minion.sh
|
||||||
|
|
Loading…
Reference in New Issue