kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Remove apiserver's access to controller-manager secrets

This commit is contained in:
John Gardiner Myers 2021-07-17 11:38:16 -07:00
parent 226380bf5b
commit 526dd38e16
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
nodeup/pkg/model/kube_apiserver.go
View File

@ -696,10 +696,10 @@ func (b *KubeAPIServerBuilder) buildPod(kubeAPIServer *kops.KubeAPIServerConfig)
addHostPathMapping(pod, container, "cloudconfig", CloudConfigFilePath)
}
pathSrvKubernetes := b.PathSrvKubernetes()
if pathSrvKubernetes != "" {
addHostPathMapping(pod, container, "srvkube", pathSrvKubernetes)
}
addHostPathMapping(pod, container, "kubernetesca", filepath.Join(b.PathSrvKubernetes(), "ca.crt"))
pathSrvKAPI := filepath.Join(b.PathSrvKubernetes(), "kube-apiserver")
addHostPathMapping(pod, container, "srvkapi", pathSrvKAPI)
pathSrvSshproxy := b.PathSrvSshproxy()
if pathSrvSshproxy != "" {