Enable PodSecurityPolicy and configure auditing

2020-07-08 00:27:43 +02:00 · 2020-07-08 00:27:43 +02:00 · cc7227c86d
commit cc7227c86d
parent e8ebff30cc
3 changed files with 82 additions and 0 deletions
--- a/tasks/install_server.yml
+++ b/tasks/install_server.yml
@ -141,6 +141,16 @@
  when:
    - kubernetes_master|bool

+- name: Configure kubelet service
+  file:
+    src: "etc/kubernetes/audit-policy.yaml"
+    dest: "/etc/kubernetes/audit-policy.yaml"
+    group: root
+    owner: root
+    mode: 0644
+  when:
+    - kubernetes_master|bool
+
 - name: Deploy initial kubeadm config
  template:
    src: kubeadm-config.yaml.j2