Files
kubernetes/cluster
Kubernetes Submit Queue b72e61edaa Merge pull request #67624 from tallclair/psp-addons
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Allow adding default capabilities to unprivileged addons

**What this PR does / why we need it**:

Allow adding the default set of capabilities back to unprivileged addons, when using the the default GCE PodSecurityPolicies. This is useful when paired with `drop: [ 'all' ]`

This is not a relaxation of permissions, as a pod that didn't touch capabilities (implicitly has the default set) is already allowed.

**Which issue(s) this PR fixes**:
Fixes https://github.com/kubernetes/dns/issues/254

**Release note**:
```release-note
NONE
```
2018-08-21 19:51:07 -07:00
..
2018-07-10 15:14:32 -04:00
2018-08-21 13:59:08 -04:00
2018-08-13 16:34:25 +08:00
2018-08-21 13:59:08 -04:00

Cluster Configuration

Deprecation Notice: This directory has entered maintenance mode and will not be accepting new providers. Please submit new automation deployments to kube-deploy. Deployments in this directory will continue to be maintained and supported at their current level of support.

The scripts and data in this directory automate creation and configuration of a Kubernetes cluster, including networking, DNS, nodes, and master components.

See the getting-started guides for examples of how to use the scripts.

cloudprovider/config-default.sh contains a set of tweakable definitions/parameters for the cluster.

The heavy lifting of configuring the VMs is done by SaltStack.

Analytics