From f50ea8ec5d3422c8ec61aad273d0bfb5a9b5fa75 Mon Sep 17 00:00:00 2001
From: Kenny Woodson <kwoodson@redhat.com>
Date: Tue, 20 Jun 2017 14:45:44 -0400
Subject: Adding option for serviceAccountConfig.limitSecretReferences

---
 inventory/byo/hosts.ose.example | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'inventory/byo/hosts.ose.example')

diff --git a/inventory/byo/hosts.ose.example b/inventory/byo/hosts.ose.example
index 63f1f00d2..8dce572bb 100644
--- a/inventory/byo/hosts.ose.example
+++ b/inventory/byo/hosts.ose.example
@@ -811,6 +811,9 @@ openshift_master_identity_providers=[{'name': 'htpasswd_auth', 'login': 'true',
 # Controls validity for etcd CA, peer, server and client certificates.
 #
 #etcd_ca_default_days=1825
+#
+# ServiceAccountConfig:LimitSecretRefences rejects pods that reference secrets their service accounts do not reference
+# openshift_master_saconfig_limitsecretreferences=false
 
 # Upgrade Control
 #
-- 
cgit v1.2.3