From 127e335802729a50dfbf78126cb8df5da5a406c6 Mon Sep 17 00:00:00 2001 From: deads2k Date: Wed, 12 Oct 2016 11:32:09 -0400 Subject: [PATCH] add flag for enabling RBAC on local-up-cluster --- hack/local-up-cluster.sh | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/hack/local-up-cluster.sh b/hack/local-up-cluster.sh index 9243f7ce3c0..2ecf8d8fa32 100755 --- a/hack/local-up-cluster.sh +++ b/hack/local-up-cluster.sh @@ -285,6 +285,10 @@ function start_apiserver { if [[ -n "${ALLOW_ANY_TOKEN:-}" ]]; then anytoken_arg="--insecure-allow-any-token " fi + authorizer_arg="" + if [[ -n "${ENABLE_RBAC:-}" ]]; then + authorizer_arg="--authorization-mode=RBAC " + fi priv_arg="" if [[ -n "${ALLOW_PRIVILEGED}" ]]; then priv_arg="--allow-privileged " @@ -302,7 +306,7 @@ function start_apiserver { fi APISERVER_LOG=/tmp/kube-apiserver.log - sudo -E "${GO_OUT}/hyperkube" apiserver ${anytoken_arg} ${priv_arg} ${runtime_config}\ + sudo -E "${GO_OUT}/hyperkube" apiserver ${anytoken_arg} ${authorizer_arg} ${priv_arg} ${runtime_config}\ ${advertise_address} \ --v=${LOG_LEVEL} \ --cert-dir="${CERT_DIR}" \