4 ms·
hm, so only people are affected that gave users access to specific permissions that are not supposed to do everything. we only allow cluster access to people th
by merb 8y ago
hm, so only people are affected that gave users access to specific permissions that are not supposed to do everything.
we only allow cluster access to people that needed cluster-admin rights anyway..
for anybody else, we abstract k8s away.
- web007 8y agohttps://github.com/kubernetes/kubernetes/issues/71411 https://github.com/kubernetes/kubernetes/issues/71411 for more details, which includes: In default configurations, all users (authenticated and unauthenticated) are allowed to perform discovery API calls that allow this escalation.