Revert "remove second CA used for kubelet auth in favor of webhook auth"

This commit is contained in:
Aleksandra Malinowska
2017-02-08 13:22:10 +01:00
committed by GitHub
parent d953402cdf
commit 1841e5b2e0
9 changed files with 50 additions and 61 deletions

View File

@@ -1,14 +0,0 @@
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: apiserver-node-proxy
labels:
kubernetes.io/cluster-service: "true"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: node-proxy
subjects:
- apiVersion: rbac/v1beta1
kind: User
name: kube-apiserver

View File

@@ -1,23 +0,0 @@
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRole
metadata:
name: node-proxy
labels:
kubernetes.io/cluster-service: "true"
rules:
- apiGroups:
- ""
resources:
- nodes/proxy
verbs:
- create
- get
- apiGroups:
- ""
resources:
- nodes/log
- nodes/stats
- nodes/metrics
- nodes/spec
verbs:
- get