Kube-DNS should not have cluster-admin
Kubernetes DNS service does not require cluster admin access. Instead,
it should use the build in system:kube-dns role.
@@ -5,7 +5,7 @@ metadata:
name: suse:caasp:kube-dns
roleRef:
kind: ClusterRole
- name: cluster-admin
+ name: system:kube-dns
apiGroup: rbac.authorization.k8s.io
subjects:
- kind: ServiceAccount
