kubeadm: Expose only the cluster-info ConfigMap in the kube-public ns

This commit is contained in:
Lucas Käldström 2017-06-26 12:56:06 +03:00
parent 637cc0a8ba
commit 037c9e8965
No known key found for this signature in database
GPG Key ID: 3FA3783D77751514

View File

@ -105,7 +105,7 @@ func createRoles(clientset *clientset.Clientset) error {
Namespace: metav1.NamespacePublic,
},
Rules: []rbac.PolicyRule{
rbachelper.NewRule("get").Groups("").Resources("configmaps").RuleOrDie(),
rbachelper.NewRule("get").Groups("").Resources("configmaps").Names("cluster-info").RuleOrDie(),
},
},
}