From cea3e224aa7b6ac028a35051c9b4f18ae05342d5 Mon Sep 17 00:00:00 2001 From: jwfang <54740235@qq.com> Date: Fri, 7 Jul 2017 17:31:11 +0800 Subject: [PATCH] change authorization_modes default value --- roles/kubespray-defaults/defaults/main.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/kubespray-defaults/defaults/main.yaml b/roles/kubespray-defaults/defaults/main.yaml index db5fc1997..ed827d27b 100644 --- a/roles/kubespray-defaults/defaults/main.yaml +++ b/roles/kubespray-defaults/defaults/main.yaml @@ -118,5 +118,5 @@ enable_network_policy: false ## List of authorization modes that must be configured for ## the k8s cluster. Only 'AlwaysAllow','AlwaysDeny', and ## 'RBAC' modes are tested. -authorization_modes: ['AlwaysAllow'] +authorization_modes: [] rbac_enabled: "{{ 'RBAC' in authorization_modes }}"