Remove kubernetes-response-engine from system:masters (#488)

As long as we are using rbac for allowing actions on several resources,
we can restrict this a bit more.
This commit is contained in:
Néstor Salceda
2019-01-17 02:43:38 +01:00
committed by Mark Stemm
parent c28892eba3
commit 6863675b76

View File

@@ -1,9 +1,7 @@
locals {
patch_for_aws_auth = <<CONFIGMAPAWSAUTH
- rolearn: ${aws_iam_role.iam-for-lambda.arn}\n
username: kubernetes-response-engine\n
groups:\n
- system:masters
username: kubernetes-response-engine
CONFIGMAPAWSAUTH
}