commit f32d7078f27bed1ce8c267964dbbf4eb4f8fc96b
author Andrey Shestakov <ashestakov@mirantis.com> Wed Dec 27 22:18:51 2017 +0200
committer Andrey Shestakov <ashestakov@mirantis.com> Tue Jan 02 17:59:34 2018 +0200
tree 5869dc8440264e28d9cadcafe2ddf13aadc609ec
parent 9b2941a47e97718993f37bbc79e53b7a62bad847

Add fixes for RBAC

Each k8s service should use own SSL certificate.
This allows to separate roles for services.
Added RBAC definitions for kube-dns.
Added small fixes.

Change-Id: I202d51c98eb5c0cc5cb97c40b8cb2c0413bf278b

README.rst

diff --git a/README.rst b/README.rst
index 7f4dedc..37fa482 100644
--- a/README.rst
+++ b/README.rst
@@ -1083,7 +1083,7 @@
     kubernetes:
       master:
         auth:
-          mode: RBAC
+          mode: Node,RBAC
 
 Then you can use ``kubernetes.control.role`` state to orchestrate role and
 rolebindings. Following example shows how to create brand new role and binding