Differences

This shows you the differences between two versions of the page.

--- soft:kubernetes [2019/12/15 17:09]
phil
+++ soft:kubernetes [2019/12/15 17:11]
phil
@@ Line 71: / Line 71: @@
 </code>
-===== Modify cluster component arguments =====
+===== Modify cluster configuration =====
 kubeadm write configuration in a configmap named //kubeadm-config// in the //kube-system// namespace.
@@ Line 87: / Line 87: @@
 </code>
-This will write new static manifests to /etc/kubernetes/manifest and restart the components that need to be restarted;
+This will write new static manifests to /etc/kubernetes/manifest and restart the components that need to be restarted.
+Example for securing a 1.7 cluster:
+<code>
+  ClusterConfiguration: |
+    apiServer:
+      extraArgs:
+        authorization-mode: Node,RBAC
+        profiling: "false"
+        enable-admission-plugins: NodeRestriction,AlwaysPullImages,DenyEscalatingExec
+</code>

philpep's wiki