Kubelet nodes should only be authorized to read objects they are associated with
Set up the kubernetes integration.
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Description
Kubelet nodes should only read objects associated to them. The Node authorization mode only allows kubelets to read Secret
, ConfigMap
, PersistentVolume
, and PersistentVolumeClaim
objects associated with their nodes.
Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml
on the master node, and set the --authorization-mode
parameter to a value that includes Node
. For example, --authorization-mode=Node,RBAC
.