openstack
/
magnum
Code Issues Proposed changes
magnum/magnum/drivers/common/templates/kubernetes/fragments
History
Lingxian Kong ade228f5c9 [K8S] Enable --use-service-account-credentials 
Enable the config --use-service-account-credentials=true. This is
necessary to support Pod Security Policy[1].

See
https://kubernetes.io/docs/reference/command-line-tools-reference/kube-controller-manager/
for the option description, and more information here[2].

[1]: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#troubleshooting
[2]: https://docs.datadoghq.com/security_monitoring/default_rules/cis-kubernetes-1.5.1-1.3.3/

Change-Id: I053808fac72a63af7ebf6f33d94659134b6cbdac
(cherry picked from commit e9b4889670)
 		2021-03-30 23:58:35 +00:00
..
add-proxy.sh Remove shebang from scripts 2020-06-16 20:53:07 +00:00
calico-service-v3-3-x.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
calico-service.sh Merge "Fix misquoted comment" into stable/victoria 2021-03-02 13:10:05 +00:00
configure-etcd.sh Merge "Remove shebang from scripts" 2020-06-26 16:02:18 +00:00
configure-kubernetes-master.sh [K8S] Enable --use-service-account-credentials 2021-03-30 23:58:35 +00:00
configure-kubernetes-minion.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
core-dns-service.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
disable-selinux.sh Remove shebang from scripts 2020-06-16 20:53:07 +00:00
enable-auto-healing.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
enable-auto-scaling.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
enable-cert-api-manager.sh Remove shebang from scripts 2020-06-16 20:53:07 +00:00
enable-cinder-csi.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
enable-helm-tiller.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
enable-ingress-controller.sh Remove shebang from scripts 2020-06-16 20:53:07 +00:00
enable-ingress-octavia.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
enable-ingress-traefik.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
enable-keystone-auth.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
enable-prometheus-monitoring.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
enable-services-master.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
enable-services-minion.sh Remove shebang from scripts 2020-06-16 20:53:07 +00:00
flannel-service.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
install-clients.sh k8s-fcos: Source bashrc for clusterconfig 2021-03-02 10:27:49 +00:00
install-cri.sh Update containerd version and tarball URL 2021-03-02 10:28:17 +00:00
install-helm-modules.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
kube-apiserver-to-kubelet-role.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
kube-dashboard-service.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
make-cert-client.sh [k8s] Support CA certs rotate 2020-08-24 16:31:58 +12:00
make-cert.sh [k8s] Support CA certs rotate 2020-08-24 16:31:58 +12:00
rotate-kubernetes-ca-certs-master.sh [k8s] Support CA certs rotate 2020-08-24 16:31:58 +12:00
rotate-kubernetes-ca-certs-worker.sh [k8s] Support CA certs rotate 2020-08-24 16:31:58 +12:00
start-container-agent.sh Remove shebang from scripts 2020-06-16 20:53:07 +00:00
upgrade-kubernetes.sh [k8s] Support CA certs rotate 2020-08-24 16:31:58 +12:00
wc-notify-master.sh k8s: Do not use insecure api port 2021-03-02 10:27:54 +00:00
write-heat-params-master.sh Remove shebang from scripts 2020-06-16 20:53:07 +00:00
write-heat-params.sh Remove shebang from scripts 2020-06-16 20:53:07 +00:00
write-kube-os-config.sh Fix Cinder CSI 2021-02-11 15:40:51 +00:00