change authorization_modes default value
This commit is contained in:
parent
0b3badf3d8
commit
552b2f0635
3 changed files with 3 additions and 3 deletions
|
@ -62,7 +62,7 @@ before_script:
|
||||||
KUBELET_DEPLOYMENT: "docker"
|
KUBELET_DEPLOYMENT: "docker"
|
||||||
VAULT_DEPLOYMENT: "docker"
|
VAULT_DEPLOYMENT: "docker"
|
||||||
WEAVE_CPU_LIMIT: "100m"
|
WEAVE_CPU_LIMIT: "100m"
|
||||||
AUTHORIZATION_MODES: "{ 'authorization_modes': ['AlwaysAllow'] }"
|
AUTHORIZATION_MODES: "{ 'authorization_modes': [] }"
|
||||||
MAGIC: "ci check this"
|
MAGIC: "ci check this"
|
||||||
|
|
||||||
.gce: &gce
|
.gce: &gce
|
||||||
|
|
|
@ -69,7 +69,7 @@ following default cluster paramters:
|
||||||
Kubernetes
|
Kubernetes
|
||||||
* *authorization_modes* - A list of [authorization mode](
|
* *authorization_modes* - A list of [authorization mode](
|
||||||
https://kubernetes.io/docs/admin/authorization/#using-flags-for-your-authorization-module)
|
https://kubernetes.io/docs/admin/authorization/#using-flags-for-your-authorization-module)
|
||||||
that the cluster should be configured for. Defaults to `['AlwaysAllow']`.
|
that the cluster should be configured for. Defaults to `[]` (i.e. no authorization).
|
||||||
Note: Only `AlwaysAllow`, `AlwaysDeny` and `RBAC` are tested.
|
Note: Only `AlwaysAllow`, `AlwaysDeny` and `RBAC` are tested.
|
||||||
|
|
||||||
Note, if cloud providers have any use of the ``10.233.0.0/16``, like instances'
|
Note, if cloud providers have any use of the ``10.233.0.0/16``, like instances'
|
||||||
|
|
|
@ -118,5 +118,5 @@ enable_network_policy: false
|
||||||
## List of authorization modes that must be configured for
|
## List of authorization modes that must be configured for
|
||||||
## the k8s cluster. Only 'AlwaysAllow','AlwaysDeny', and
|
## the k8s cluster. Only 'AlwaysAllow','AlwaysDeny', and
|
||||||
## 'RBAC' modes are tested.
|
## 'RBAC' modes are tested.
|
||||||
authorization_modes: ['AlwaysAllow']
|
authorization_modes: []
|
||||||
rbac_enabled: "{{ 'RBAC' in authorization_modes }}"
|
rbac_enabled: "{{ 'RBAC' in authorization_modes }}"
|
||||||
|
|
Loading…
Reference in a new issue