Fix: add nonResourcePath into abac policy config (tkestack#131)

TomatoAres · Feb 13, 2020 · 684df86 · 684df86
1 parent a1aeb65
commit 684df86
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cmd/tke-installer/app/installer/manifests/tke-auth-api/tke-auth-api.yaml b/cmd/tke-installer/app/installer/manifests/tke-auth-api/tke-auth-api.yaml
@@ -80,7 +80,7 @@ metadata:
  namespace: tke
 data:
  abac-policy.json: |
- {"apiVersion":"abac.authorization.kubernetes.io/v1beta1","kind":"Policy","spec":{"user":"system:*","namespace":"*", "resource":"*","apiGroup":"*", "group": "*"}}
+ {"apiVersion":"abac.authorization.kubernetes.io/v1beta1","kind":"Policy","spec":{"user":"system:*","namespace":"*", "resource":"*","apiGroup":"*", "group": "*", "nonResourcePath":"*"}}
  tke-auth-api.toml: |
  [secure_serving]
  tls_cert_file = "/app/certs/server.crt"