Kubernetes Submit Queue b799bbf0a8 Merge pull request #38816 from deads2k/rbac-23-switch-kubedns-sa ...

Automatic merge from submit-queue

move kube-dns to a separate service account

Switches the kubedns addon to run as a separate service account so that we can subdivide RBAC permission for it.  The RBAC permissions will need a little more refinement which I'm expecting to find in https://github.com/kubernetes/kubernetes/pull/38626 .

@cjcullen @kubernetes/sig-auth since this is directly related to enabling RBAC with subdivided permissions
 @thockin @kubernetes/sig-network since this directly affects now kubedns is added.  


```release-note
`kube-dns` now runs using a separate `system:serviceaccount:kube-system:kube-dns` service account which is automatically bound to the correct RBAC permissions.
```

2017-02-23 12:06:13 -08:00

..

cmd/kube-scheduler

Remove default failure domains from anti-affinity feature

2017-02-16 13:32:34 +01:00

pkg

Merge pull request #38816 from deads2k/rbac-23-switch-kubedns-sa

2017-02-23 12:06:13 -08:00

BUILD

add defaultTolerationSeconds admission controller

2017-02-18 23:48:03 +08:00

OWNERS

Updated top level owners file to match new format

2017-01-19 11:29:16 -08:00