[ANSIBLE][BUILD] Switch to default authorization scheme for Kubernetes API

In RKE 1.3.8 nginx ingress controller pods failed to run with authorization turned off.

Change-Id: I92f5cdee661a91c05ea8ae1fa2ac6183705a3d1f
Issue-ID: OOM-2948
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>

diff --git a/ansible/roles/rke/templates/cluster.yml.j2 b/ansible/roles/rke/templates/cluster.yml.j2
index 2d4233c..379e8cc 100644 (file)
--- a/ansible/roles/rke/templates/cluster.yml.j2
+++ b/ansible/roles/rke/templates/cluster.yml.j2
@@ -98,9 +98,6 @@ system_images: {}
 ssh_key_path: "{{ cluster_config_dir }}/cluster_key"
 ssh_cert_path: ""
 ssh_agent_auth: false
-authorization:
-  mode: none
-  options: {}
 ignore_docker_version: false
 kubernetes_version: {{ rke_kubernetes_version }}
 private_registries: []

diff --git a/build/data_lists/rke_docker_images.list b/build/data_lists/rke_docker_images.list
index 25cb068..1b5a65d 100644 (file)
--- a/build/data_lists/rke_docker_images.list
+++ b/build/data_lists/rke_docker_images.list
@@ -13,3 +13,4 @@ rancher/mirrored-pause:3.6
 rancher/nginx-ingress-controller:nginx-1.1.0-rancher1
 rancher/rke-tools:v0.1.80
 rancher/mirrored-flannelcni-flannel:v0.17.0
+rancher/mirrored-ingress-nginx-kube-webhook-certgen:v1.1.1