From c7c2c7355062cbc416822b8e2c7acffdf95ccbdb Mon Sep 17 00:00:00 2001 From: Eric Tune Date: Tue, 13 Dec 2016 07:36:42 -0800 Subject: [PATCH] Make default for --anonymous-auth be false. --- pkg/genericapiserver/options/server_run_options.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/genericapiserver/options/server_run_options.go b/pkg/genericapiserver/options/server_run_options.go index fd50bbc80ae45..f03156f39c33b 100644 --- a/pkg/genericapiserver/options/server_run_options.go +++ b/pkg/genericapiserver/options/server_run_options.go @@ -129,7 +129,7 @@ type ServerRunOptions struct { func NewServerRunOptions() *ServerRunOptions { return &ServerRunOptions{ AdmissionControl: "AlwaysAdmit", - AnonymousAuth: true, + AnonymousAuth: false, AuthorizationMode: "AlwaysAllow", AuthorizationWebhookCacheAuthorizedTTL: 5 * time.Minute, AuthorizationWebhookCacheUnauthorizedTTL: 30 * time.Second, @@ -293,7 +293,7 @@ func (s *ServerRunOptions) AddUniversalFlags(fs *pflag.FlagSet) { fs.BoolVar(&s.AnonymousAuth, "anonymous-auth", s.AnonymousAuth, ""+ "Enables anonymous requests to the secure port of the API server. "+ "Requests that are not rejected by another authentication method are treated as anonymous requests. "+ - "Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.") + "Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated. ") fs.StringVar(&s.BasicAuthFile, "basic-auth-file", s.BasicAuthFile, ""+ "If set, the file that will be used to admit requests to the secure port of the API server "+