From 14df916093ac1867c7ae2ead31351e8d755e80ae Mon Sep 17 00:00:00 2001 From: Cao Shufeng Date: Sat, 15 Jul 2017 18:31:02 +0800 Subject: [PATCH] Update NamespaceLifecycle admission controller --- docs/admin/admission-controllers.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/admin/admission-controllers.md b/docs/admin/admission-controllers.md index 266e98c9c2..3602bd43a6 100644 --- a/docs/admin/admission-controllers.md +++ b/docs/admin/admission-controllers.md @@ -232,7 +232,8 @@ See the [InitialResouces proposal](https://git.k8s.io/community/contributors/des ### NamespaceLifecycle This plug-in enforces that a `Namespace` that is undergoing termination cannot have new objects created in it, -and ensures that requests in a non-existent `Namespace` are rejected. +and ensures that requests in a non-existent `Namespace` are rejected. This plug-in also prevents deletion of +three system reserved namespaces `default`, `kube-system`, `kube-public`. A `Namespace` deletion kicks off a sequence of operations that remove all objects (pods, services, etc.) in that namespace. In order to enforce integrity of that process, we strongly recommend running this plug-in.