-
Bug
-
Resolution: Done
-
Blocker
-
None
-
None
-
None
OpenShift carries a patch for the kube-apiserver cobra command (https://github.com/openshift/kubernetes/blob/1ff0731efd17fe233ad7e3e61bb210b7e4f2f183/cmd/kube-apiserver/app/server.go#L129-L151) that is responsible for enabling OpenShift-specific behaviors in KAS. Since MicroShift doesn't run the patched command, this is skipped, so MicroShift is missing things like SCC admission for pods, custom resource validation, bootstrap RBAC, etc.
- account is impacted by
-
USHIFT-286 Run Service CA component as non root
- Closed
- is blocked by
-
USHIFT-227 Cluster Policy Controller integration
- Closed
- is duplicated by
-
API-1430 Enable the Openshift flavor of the kube-apiserver
- Closed
- links to