kubernetes/cmd/kubelet/app
Kubernetes Submit Queue 63380d12db
Merge pull request #59666 from mtaufen/kc-secure-componentconfig-defaults
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Secure Kubelet's componentconfig defaults while maintaining CLI compatibility

This updates the Kubelet's componentconfig defaults, while applying the legacy defaults to values from options.NewKubeletConfiguration(). This keeps defaults the same for the command line and improves the security of defaults when you load config from a file.

See: https://github.com/kubernetes/kubernetes/issues/53618
See: https://github.com/kubernetes/kubernetes/pull/53833#discussion_r166669931

Also moves EnableServer to KubeletFlags, per @tallclair's comments on #53833.

We should find way of generating documentation for config file defaults, so that people can easily look up what's different from flags.

```release-note
Action required: Default values differ between the Kubelet's componentconfig (config file) API and the Kubelet's command line. Be sure to review the default values when migrating to using a config file.
```
2018-02-14 10:09:13 -08:00
..
options Merge pull request #59666 from mtaufen/kc-secure-componentconfig-defaults 2018-02-14 10:09:13 -08:00
auth.go move KubeletConfiguration out of componentconfig API group 2017-08-15 08:12:42 -07:00
BUILD Kubelet flags take precedence 2018-01-29 10:07:37 -08:00
OWNERS Update OWNERS 2017-01-18 15:19:06 -08:00
plugins.go CSI - feature gate fix, gated RBAC rules, csi nodeID label 2017-12-02 05:54:54 -05:00
server_linux.go Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
server_test.go Lift embedded structure out of eviction-related KubeletConfiguration fields 2017-11-16 18:35:13 -08:00
server_unsupported.go Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
server.go Secure Kubelet's componentconfig defaults while maintaining CLI compatibility 2018-02-13 18:10:15 -08:00