kubernetes/plugin
Kubernetes Submit Queue b799bbf0a8 Merge pull request #38816 from deads2k/rbac-23-switch-kubedns-sa
Automatic merge from submit-queue

move kube-dns to a separate service account

Switches the kubedns addon to run as a separate service account so that we can subdivide RBAC permission for it.  The RBAC permissions will need a little more refinement which I'm expecting to find in https://github.com/kubernetes/kubernetes/pull/38626 .

@cjcullen @kubernetes/sig-auth since this is directly related to enabling RBAC with subdivided permissions
 @thockin @kubernetes/sig-network since this directly affects now kubedns is added.  


```release-note
`kube-dns` now runs using a separate `system:serviceaccount:kube-system:kube-dns` service account which is automatically bound to the correct RBAC permissions.
```
2017-02-23 12:06:13 -08:00
..
cmd/kube-scheduler Remove default failure domains from anti-affinity feature 2017-02-16 13:32:34 +01:00
pkg Merge pull request #38816 from deads2k/rbac-23-switch-kubedns-sa 2017-02-23 12:06:13 -08:00
BUILD add defaultTolerationSeconds admission controller 2017-02-18 23:48:03 +08:00
OWNERS Updated top level owners file to match new format 2017-01-19 11:29:16 -08:00