Merge pull request #31004 from clementnuss/patch-1

docs: add link to a new kubelet csr approver
This commit is contained in:
Kubernetes Prow Robot
2021-12-20 07:04:56 -08:00
committed by GitHub
@@ -283,7 +283,7 @@ the node identity with an out of band mechanism.
{{% thirdparty-content %}}
Third party custom controllers can be used:
- [kubelet-rubber-stamp](https://github.com/kontena/kubelet-rubber-stamp)
- [kubelet-csr-approver](https://github.com/postfinance/kubelet-csr-approver)
Such a controller is not a secure mechanism unless it not only verifies the CommonName
in the CSR but also verifies the requested IPs and domain names. This would prevent