kubeadm: Expose only the cluster-info ConfigMap in the kube-public ns

wlan0 · Jun 26, 2017 · 037c9e8 · 037c9e8
1 parent 637cc0a
commit 037c9e8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cmd/kubeadm/app/phases/apiconfig/clusterroles.go b/cmd/kubeadm/app/phases/apiconfig/clusterroles.go
@@ -105,7 +105,7 @@ func createRoles(clientset *clientset.Clientset) error {
  Namespace: metav1.NamespacePublic,
  },
  Rules: []rbac.PolicyRule{
- rbachelper.NewRule("get").Groups("").Resources("configmaps").RuleOrDie(),
+ rbachelper.NewRule("get").Groups("").Resources("configmaps").Names("cluster-info").RuleOrDie(),
  },
  },
  }