kubeadm: Expose only the cluster-info ConfigMap in the kube-public ns

037c9e89 · Lucas Käldström · 637cc0a8 · 037c9e89
Unverified Commit 037c9e89 authored Jun 26, 2017 by Lucas Käldström
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

clusterroles.go cmd/kubeadm/app/phases/apiconfig/clusterroles.go +1 -1

No files found.
--- a/cmd/kubeadm/app/phases/apiconfig/clusterroles.go
+++ b/cmd/kubeadm/app/phases/apiconfig/clusterroles.go
@@ -105,7 +105,7 @@ func createRoles(clientset *clientset.Clientset) error {
 				Namespace: metav1.NamespacePublic,
 			},
 			Rules: []rbac.PolicyRule{
-				rbachelper.NewRule("get").Groups("").Resources("configmaps").RuleOrDie(),
+				rbachelper.NewRule("get").Groups("").Resources("configmaps").Names("cluster-info").RuleOrDie(),
 			},
 		},
 	}