append an abac rule for $KUBE_USER.

2025-11-30 21:33:53 +00:00 · 2016-07-14 11:01:07 -07:00
parent e3fa011d28
commit e559e305dd
5 changed files with 16 additions and 2 deletions
--- a/cluster/saltbase/salt/kube-apiserver/init.sls
+++ b/cluster/saltbase/salt/kube-apiserver/init.sls
@@ -19,6 +19,7 @@
 /srv/kubernetes/abac-authz-policy.jsonl:
  file.managed:
    - source: salt://kube-apiserver/abac-authz-policy.jsonl
+    - template: jinja
    - user: root
    - group: root
    - mode: 600