Add disable filter to allow exec/logs

This commit is contained in:
Daishan 2020-11-10 11:33:58 -07:00
parent 3df58506a2
commit 5c32b4fb03

View File

@ -557,7 +557,7 @@ func (s *PodImpersonation) augmentPod(pod *v1.Pod, sa *v1.ServiceAccount) *v1.Po
Value: "/root/.kube/config", Value: "/root/.kube/config",
}, },
}, },
Command: []string{"sh", "-c", "kubectl proxy || true"}, Command: []string{"sh", "-c", "kubectl proxy --disable-filter || true"},
SecurityContext: &v1.SecurityContext{ SecurityContext: &v1.SecurityContext{
RunAsUser: &zero, RunAsUser: &zero,
RunAsGroup: &zero, RunAsGroup: &zero,