mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-21 11:29:26 +00:00
Remove kubernetes-response-engine from system:masters (#488)
As long as we are using rbac for allowing actions on several resources, we can restrict this a bit more.
This commit is contained in:
committed by
Mark Stemm
parent
c28892eba3
commit
6863675b76
@@ -1,9 +1,7 @@
|
||||
locals {
|
||||
patch_for_aws_auth = <<CONFIGMAPAWSAUTH
|
||||
- rolearn: ${aws_iam_role.iam-for-lambda.arn}\n
|
||||
username: kubernetes-response-engine\n
|
||||
groups:\n
|
||||
- system:masters
|
||||
username: kubernetes-response-engine
|
||||
CONFIGMAPAWSAUTH
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user