c12s-kubespray/roles/kubernetes/control-plane/templates
Tomas Zvala 30c77ea4c1
Add the option to enable default Pod Security Configuration (#9017)
* Add the option to enable default Pod Security Configuration

Enable Pod Security in all namespaces by default with the option to
exempt some namespaces. Without the change only namespaces explicitly
configured will receive the admission plugin treatment.

* Fix the PR according to code review comments

* Revert the latest changes

- leave the empty file when kube_pod_security_use_default, but add comment explaining the empty file
- don't attempt magic at conditionally adding PodSecurity to kube_apiserver_admission_plugins_needs_configuration
2022-08-18 01:16:36 -07:00
..
admission-controls.yaml.j2 [kubeadm] use v1beta3 configuration version 2022-06-15 00:57:20 -07:00
apiserver-audit-policy.yaml.j2 make sure serviceaccounts/token is only in the metadata stage (#7679) 2021-06-07 08:38:40 -07:00
apiserver-audit-webhook-config.yaml.j2 Move kubernetes/master to kubernetes/control-plane (#7218) 2021-02-01 07:15:49 -08:00
eventratelimit.yaml.j2 [kubeadm] use v1beta3 configuration version 2022-06-15 00:57:20 -07:00
k8s-certs-renew.service.j2 Auto renew control plane certificates (#7358) 2021-03-22 11:22:48 -07:00
k8s-certs-renew.sh.j2 Delete "kubeadm alpha certs" code (#8322) 2021-12-20 12:53:33 -08:00
k8s-certs-renew.timer.j2 Add auto_renew_certificates_systemd_calendar (#7490) 2021-04-12 09:47:45 -07:00
kubeadm-config.v1beta3.yaml.j2 remove-etcd-unsupported-arch (#9049) 2022-07-04 05:39:24 -07:00
kubeadm-controlplane.v1beta3.yaml.j2 [kubeadm] use v1beta3 configuration version 2022-06-15 00:57:20 -07:00
kubescheduler-config.yaml.j2 [kubernetes] drop pre 1.22.0 workarounds 2022-06-15 00:57:20 -07:00
podsecurity.yaml.j2 Add the option to enable default Pod Security Configuration (#9017) 2022-08-18 01:16:36 -07:00
psp-cr.yml.j2 [PodSecurityPolicy] Move the install of psp (#8744) 2022-05-09 09:21:19 -07:00
psp-crb.yml.j2 [PodSecurityPolicy] Move the install of psp (#8744) 2022-05-09 09:21:19 -07:00
psp.yml.j2 [PodSecurityPolicy] Move the install of psp (#8744) 2022-05-09 09:21:19 -07:00
secrets_encryption.yaml.j2 Move kubernetes/master to kubernetes/control-plane (#7218) 2021-02-01 07:15:49 -08:00
webhook-authorization-config.yaml.j2 Move kubernetes/master to kubernetes/control-plane (#7218) 2021-02-01 07:15:49 -08:00
webhook-token-auth-config.yaml.j2 Add optional setting for ca data in auth webhook (#8777) 2022-05-05 14:52:43 -07:00