mirror of
				https://github.com/k3s-io/kubernetes.git
				synced 2025-11-04 07:49:35 +00:00 
			
		
		
		
	remove kibana system:anonymous rbac
Signed-off-by: André Bauer <monotek23@gmail.com>
This commit is contained in:
		@@ -53,28 +53,3 @@ spec:
 | 
				
			|||||||
              port: ui
 | 
					              port: ui
 | 
				
			||||||
            initialDelaySeconds: 5
 | 
					            initialDelaySeconds: 5
 | 
				
			||||||
            timeoutSeconds: 10
 | 
					            timeoutSeconds: 10
 | 
				
			||||||
---
 | 
					 | 
				
			||||||
kind: ClusterRole
 | 
					 | 
				
			||||||
apiVersion: rbac.authorization.k8s.io/v1
 | 
					 | 
				
			||||||
metadata:
 | 
					 | 
				
			||||||
  name: kubernetes-dashboard-anonymous
 | 
					 | 
				
			||||||
rules:
 | 
					 | 
				
			||||||
- apiGroups: [""]
 | 
					 | 
				
			||||||
  resources: ["services/proxy"]
 | 
					 | 
				
			||||||
  resourceNames: ["kibana-logging"]
 | 
					 | 
				
			||||||
  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
 | 
					 | 
				
			||||||
- nonResourceURLs: ["/ui", "/ui/*", "/api/v1/namespaces/kube-system/services/kibana-logging/proxy/*"]
 | 
					 | 
				
			||||||
  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
---
 | 
					 | 
				
			||||||
apiVersion: rbac.authorization.k8s.io/v1
 | 
					 | 
				
			||||||
kind: ClusterRoleBinding
 | 
					 | 
				
			||||||
metadata:
 | 
					 | 
				
			||||||
  name: kubernetes-dashboard-anonymous
 | 
					 | 
				
			||||||
roleRef:
 | 
					 | 
				
			||||||
  apiGroup: rbac.authorization.k8s.io
 | 
					 | 
				
			||||||
  kind: ClusterRole
 | 
					 | 
				
			||||||
  name: kubernetes-dashboard-anonymous
 | 
					 | 
				
			||||||
subjects:
 | 
					 | 
				
			||||||
- kind: User
 | 
					 | 
				
			||||||
  name: system:anonymous
 | 
					 | 
				
			||||||
		Reference in New Issue
	
	Block a user