[hotfix] add hardening prod k8s (!8)
Co-authored-by: denis.patrakeev <denis.patrakeev@avroid.tech> Reviewed-on: https://git.avroid.tech/K8s/k8s-deploy/pulls/8
This commit is contained in:
10
env/avroid_prod/k8s-avroid-office.prod.local/inventory/hardening.yaml
vendored
Normal file
10
env/avroid_prod/k8s-avroid-office.prod.local/inventory/hardening.yaml
vendored
Normal file
@@ -0,0 +1,10 @@
|
||||
---
|
||||
# https://github.com/kubernetes-sigs/kubespray/blob/master/docs/operations/hardening.md
|
||||
# list of admission plugins that needs to be configured
|
||||
# https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/
|
||||
kube_apiserver_enable_admission_plugins:
|
||||
- ServiceAccount
|
||||
- NodeRestriction
|
||||
- ResourceQuota
|
||||
- PodNodeSelector
|
||||
kube_apiserver_admission_control_config_file: true
|
||||
Reference in New Issue
Block a user