github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-10-22 12:27:10 +00:00
Code Issues Projects Releases Wiki Activity

Remove kubernetes-response-engine from system:masters (#488)

Browse Source 
As long as we are using rbac for allowing actions on several resources,
we can restrict this a bit more.
This commit is contained in:
Néstor Salceda
2019-01-17 02:43:38 +01:00
committed by Mark Stemm
parent c28892eba3
commit 6863675b76
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
integrations/kubernetes-response-engine/deployment/aws/outputs.tf
View File

@@ -1,9 +1,7 @@
locals { locals {
patch_for_aws_auth = <<CONFIGMAPAWSAUTH patch_for_aws_auth = <<CONFIGMAPAWSAUTH
- rolearn: ${aws_iam_role.iam-for-lambda.arn}\n - rolearn: ${aws_iam_role.iam-for-lambda.arn}\n
username: kubernetes-response-engine\n username: kubernetes-response-engine
groups:\n
- system:masters
CONFIGMAPAWSAUTH CONFIGMAPAWSAUTH
} }