From 95101da940b0a7f3526338a4284131ef3cbef9d6 Mon Sep 17 00:00:00 2001
From: Ryan Phillips <rphillips@redhat.com>
Date: Mon, 25 Jan 2021 13:25:17 -0600
Subject: [PATCH] disable anonymous auth on bootstrap nodes

---
 data/data/bootstrap/systemd/units/kubelet.service.template | 1 +
 1 file changed, 1 insertion(+)

diff --git a/data/data/bootstrap/systemd/units/kubelet.service.template b/data/data/bootstrap/systemd/units/kubelet.service.template
index c4cf88b188a..1888ddeea8e 100644
--- a/data/data/bootstrap/systemd/units/kubelet.service.template
+++ b/data/data/bootstrap/systemd/units/kubelet.service.template
@@ -14,6 +14,7 @@ EnvironmentFile=-/etc/kubernetes/kubelet-pause-image-override
 
 ExecStart=/usr/bin/hyperkube \
   kubelet \
+    --anonymous-auth=false \
     --container-runtime=remote \
     --container-runtime-endpoint=/var/run/crio/crio.sock \
     --runtime-request-timeout=${KUBELET_RUNTIME_REQUEST_TIMEOUT} \