rancher/rke
1
0
Fork 0
mirror of https://github.com/rancher/rke.git synced 2025-09-01 15:06:23 +00:00
Code Issues Releases Wiki Activity

Enable PodSecurityPolicy support

Browse Source
This commit is contained in:
moelsayed
2017-12-20 03:51:07 +02:00
parent 04a137b097
commit 2011a2cf01
10 changed files with 268 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
services/kubeapi.go
View File

@@ -47,6 +47,9 @@ func buildKubeAPIConfig(host *hosts.Host, kubeAPIService v3.KubeAPIService, etcd
if authorizationMode == RBACAuthorizationMode {
imageCfg.Cmd = append(imageCfg.Cmd, "--authorization-mode=RBAC")
}
if kubeAPIService.PodSecurityPolicy {
imageCfg.Cmd = append(imageCfg.Cmd, "--runtime-config=extensions/v1beta1/podsecuritypolicy=true", "--admission-control=PodSecurityPolicy")
}
hostCfg := &container.HostConfig{
VolumesFrom: []string{
SidekickContainerName,