mirror of
https://github.com/truecharts/charts.git
synced 2026-07-20 16:31:21 -03:00
50 lines
1.3 KiB
YAML
50 lines
1.3 KiB
YAML
- op: add
|
|
path: /cluster/proxy/extraArgs
|
|
value:
|
|
"metrics-bind-address": "0.0.0.0:10249"
|
|
- op: add
|
|
path: /cluster/controllerManager/extraArgs
|
|
value:
|
|
"bind-address": "0.0.0.0"
|
|
|
|
- op: add
|
|
path: /cluster/scheduler/extraArgs
|
|
value:
|
|
"bind-address": "0.0.0.0"
|
|
- op: replace
|
|
path: /cluster/apiServer/admissionControl
|
|
value:
|
|
- name: PodSecurity
|
|
configuration:
|
|
apiVersion: pod-security.admission.config.k8s.io/v1alpha1
|
|
defaults:
|
|
audit: restricted
|
|
audit-version: latest
|
|
enforce: baseline
|
|
enforce-version: latest
|
|
warn: restricted
|
|
warn-version: latest
|
|
exemptions:
|
|
namespaces:
|
|
- kube-system
|
|
- metallb
|
|
- metallb-config
|
|
- topolvm-system
|
|
- longhorn-system
|
|
- kyverno
|
|
- system-upgrade
|
|
- openebs
|
|
- snapshot-controller
|
|
- volsync
|
|
- flux-system
|
|
runtimeClasses: []
|
|
usernames: []
|
|
kind: PodSecurityConfiguration
|
|
- op: add
|
|
path: /machine/features/kubernetesTalosAPIAccess
|
|
value:
|
|
enabled: true
|
|
allowedRoles:
|
|
- os:admin
|
|
allowedKubernetesNamespaces:
|
|
- system-upgrade |