c12s-kubespray/roles/kubernetes-apps/cluster_roles/templates/node-crb.yml.j2

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  annotations:
    rbac.authorization.kubernetes.io/autoupdate: "true"
  labels:
    kubernetes.io/bootstrapping: rbac-defaults
  name: kubespray:system:node
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:node
subjects:
- apiGroup: rbac.authorization.k8s.io
  kind: Group
  name: system:nodes
Make ClusterRoleBinding to admit all nodes with right cert (#1861) This is to work around #1856 which can occur when kubelet hostname and resolvable hostname (or cloud instance name) do not match. 2017-10-24 16:05:58 +00:00			`---`
			`apiVersion: rbac.authorization.k8s.io/v1`
			`kind: ClusterRoleBinding`
			`metadata:`
			`annotations:`
			`rbac.authorization.kubernetes.io/autoupdate: "true"`
			`labels:`
			`kubernetes.io/bootstrapping: rbac-defaults`
Prefix system:node CRB Change the name of `system:node` CRB to `kubespray:system:node` to avoid conflicts with the auto-reconciled CRB also named `system:node` Fixes #2121 2018-03-09 05:56:46 +00:00			`name: kubespray:system:node`
Make ClusterRoleBinding to admit all nodes with right cert (#1861) This is to work around #1856 which can occur when kubelet hostname and resolvable hostname (or cloud instance name) do not match. 2017-10-24 16:05:58 +00:00			`roleRef:`
			`apiGroup: rbac.authorization.k8s.io`
			`kind: ClusterRole`
			`name: system:node`
			`subjects:`
			`- apiGroup: rbac.authorization.k8s.io`
			`kind: Group`
			`name: system:nodes`