forked from hswaw/hscloud
add vpn insecure namespace
Change-Id: I8a774ae625342af3521ad0ab11a8f6d4e4ef6c97master
parent
e9f4b77bf8
commit
98ef1518e0
|
@ -145,6 +145,8 @@ local Cluster(short, realm) = {
|
|||
policies.AllowNamespaceInsecure("matrix"),
|
||||
policies.AllowNamespaceInsecure("registry"),
|
||||
policies.AllowNamespaceInsecure("internet"),
|
||||
# TODO(implr): restricted policy with CAP_NET_ADMIN and tuntap, but no full root
|
||||
policies.AllowNamespaceInsecure("implr-vpn"),
|
||||
],
|
||||
|
||||
// Allow all service accounts (thus all controllers) to create secure pods.
|
||||
|
|
Loading…
Reference in New Issue