<p>I would like to enable the <a href="http://kubernetes.io/v1.1/docs/admin/authorization.html">ABAC mode</a> for the Kubernetes Cluster I'm using in Google's Container Engine. (more specifically, I would like to restrict access to the API service for the <em>default</em> service account which is automatically assigned to all pods). However, since <code>--authorization-mode=ABAC</code> is a command line argument for <code>kube-apiserver</code> and since the API server is managed in Google Container Engine, I didn't find a way to enable authorization for my cluster.</p>

<p>Is there a way to enable ABAC mode on GCE?</p>

<p>I'm currently running Kubernetes v1.1.7 on server and nodes.</p>

<p>There is not a way to enable ABAC mode on Google Container Engine. If you need fine-grained control over the parameters passed to any of the master components you have to run Kubernetes on GCE instead. </p>
