Skip to content

Instantly share code, notes, and snippets.

@jbialy

jbialy/minikube_rbac_psp.md

Last active October 8, 2018 17:17
Show Gist options
  • Save jbialy/1a4c7a4a928c9a9795f1a055df16aa8e to your computer and use it in GitHub Desktop.
Save jbialy/1a4c7a4a928c9a9795f1a055df16aa8e to your computer and use it in GitHub Desktop.
Download ZIP
Minikube with RBAC and PSP enabled
Raw
minikube_rbac_psp.md

RBAC is enable by default

Start minikube with RBAC on OSX:

$ minikube start --bootstrapper=kubeadm

In order to enable PSP:

$ minikube delete
$ minikube start \
  --extra-config=apiserver.feature-gates=CustomResourceSubresources=true \
  --extra-config=apiserver.admission-control="NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,NodeRestriction,PodSecurityPolicy,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota"

Check active resources:

$ k api-resources
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment