Fix audit-policies deployment
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
Adrien Reslinger 2020-07-30 18:31:04 +02:00
parent 0c49098177
commit 743684edd4
3 changed files with 12 additions and 4 deletions

View file

@ -80,7 +80,7 @@ apiServer:
extraArgs:
enable-admission-plugins: NodeRestriction,PodSecurityPolicy
authorization-mode: "Node,RBAC"
audit-policy-file: "/etc/kubernetes/audit-policy.yaml"
audit-policy-file: "/etc/kubernetes/policies/audit-policy.yaml"
audit-log-path: "/var/log/apiserver/audit.log"
audit-log-maxage: "30"
audit-log-maxbackup: "10"
@ -91,6 +91,11 @@ apiServer:
mountPath: "/var/log/apiserver"
readOnly: false
pathType: DirectoryOrCreate
- name: "audit-policies"
hostPath: "/etc/kubernetes/policies"
mountPath: "/etc/kubernetes/policies"
readOnly: false
pathType: DirectoryOrCreate
{% if lb_kubemaster is defined %}
certSANs:
- "{{ lb_kubemaster }}"