disable anonymous auth on bootstrap nodes

openshift · Jan 25, 2021 · 61039f2 · 61039f2
1 parent a514c68
commit 61039f2
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/data/data/bootstrap/systemd/units/kubelet.service.template b/data/data/bootstrap/systemd/units/kubelet.service.template
@@ -14,6 +14,8 @@ EnvironmentFile=-/etc/kubernetes/kubelet-pause-image-override
 
 ExecStart=/usr/bin/hyperkube \
   kubelet \
+    --anonymous-auth=false \
+    --authorization-mode=Webhook \
     --container-runtime=remote \
     --container-runtime-endpoint=/var/run/crio/crio.sock \
     --runtime-request-timeout=${KUBELET_RUNTIME_REQUEST_TIMEOUT} \