kubernetes/plugin
Kubernetes Submit Queue e4a4fe4a89 Merge pull request #41285 from liggitt/kube-scheduler-role
Automatic merge from submit-queue (batch tested with PRs 40297, 41285, 41211, 41243, 39735)

Secure kube-scheduler

This PR:
* Adds a bootstrap `system:kube-scheduler` clusterrole
* Adds a bootstrap clusterrolebinding to the `system:kube-scheduler` user
* Sets up a kubeconfig for kube-scheduler on GCE (following the controller-manager pattern)
* Switches kube-scheduler to running with kubeconfig against secured port (salt changes, beware)
* Removes superuser permissions from kube-scheduler in local-up-cluster.sh
* Adds detailed RBAC deny logging

```release-note
On kube-up.sh clusters on GCE, kube-scheduler now contacts the API on the secured port.
```
2017-02-15 03:25:10 -08:00
..
cmd/kube-scheduler copy pkg/util/logs to apiserver 2017-02-13 12:07:15 -05:00
pkg Merge pull request #41285 from liggitt/kube-scheduler-role 2017-02-15 03:25:10 -08:00
BUILD mechanical results of client auth plugin 2017-01-20 08:05:18 -05:00
OWNERS Updated top level owners file to match new format 2017-01-19 11:29:16 -08:00