From 6a5295687ab2b5d444f9bd61029731a2eaf68ebf Mon Sep 17 00:00:00 2001
From: Mark Burnett <mark.m.burnett@gmail.com>
Date: Mon, 27 Aug 2018 15:09:26 -0500
Subject: [PATCH] Disable anonymous auth for Kubelet

Change-Id: Ia04564c1221977a1ff0fe87e9f923a3a016a8836
---
 .../templates/roles/common/etc/systemd/system/kubelet.service    | 1 +
 1 file changed, 1 insertion(+)

diff --git a/promenade/templates/roles/common/etc/systemd/system/kubelet.service b/promenade/templates/roles/common/etc/systemd/system/kubelet.service
index 59dc56ee..b3c3ef65 100644
--- a/promenade/templates/roles/common/etc/systemd/system/kubelet.service
+++ b/promenade/templates/roles/common/etc/systemd/system/kubelet.service
@@ -6,6 +6,7 @@ After=network-online.target
 [Service]
 ExecStart=/opt/kubernetes/bin/kubelet \
     --allow-privileged=true \
+    --anonymous-auth=false \
     --client-ca-file=/etc/kubernetes/pki/cluster-ca.pem \
     --cluster-dns={{ config['KubernetesNetwork:dns.service_ip'] }} \
     --cluster-domain={{ config['KubernetesNetwork:dns.cluster_domain'] }} \