public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-26 13:08:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove protect-kernel-defaults

Browse Source
This commit is contained in:
Andy Pitcher
2023-09-11 11:31:45 -04:00
parent 4ca8cfada3
commit cbe7fe5d69
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/pages-for-subheaders/rke1-hardening-guide.md
+1 -1
View File
@@ -295,6 +295,7 @@ services:
kubelet: kubelet:
extra_args: extra_args:
feature-gates: RotateKubeletServerCertificate=true feature-gates: RotateKubeletServerCertificate=true
protect-kernel-defaults: true
generate_serving_certificate: true generate_serving_certificate: true
addons: | addons: |
# Upstream Kubernetes restricted PSP policy # Upstream Kubernetes restricted PSP policy
@@ -441,7 +442,6 @@ rancher_kubernetes_engine_config:
kubelet: kubelet:
extra_args: extra_args:
feature-gates: RotateKubeletServerCertificate=true feature-gates: RotateKubeletServerCertificate=true
protect-kernel-defaults: true
tls-cipher-suites: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 tls-cipher-suites: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256
generate_serving_certificate: true generate_serving_certificate: true
scheduler: scheduler: