From 5c32b4fb0318efff1424a2f1c3ce42ec871aaa24 Mon Sep 17 00:00:00 2001
From: Daishan <daishan@rancher.com>
Date: Tue, 10 Nov 2020 11:33:58 -0700
Subject: [PATCH] Add disable filter to allow exec/logs

---
 pkg/podimpersonation/podimpersonation.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/podimpersonation/podimpersonation.go b/pkg/podimpersonation/podimpersonation.go
index e726368..360b03b 100644
--- a/pkg/podimpersonation/podimpersonation.go
+++ b/pkg/podimpersonation/podimpersonation.go
@@ -557,7 +557,7 @@ func (s *PodImpersonation) augmentPod(pod *v1.Pod, sa *v1.ServiceAccount) *v1.Po
 				Value: "/root/.kube/config",
 			},
 		},
-		Command: []string{"sh", "-c", "kubectl proxy || true"},
+		Command: []string{"sh", "-c", "kubectl proxy --disable-filter || true"},
 		SecurityContext: &v1.SecurityContext{
 			RunAsUser:              &zero,
 			RunAsGroup:             &zero,