fix admission plugins orders (#6900)

fix admission plugins orders, MutatingAdmissionWebhook should be ahead of ValidatingAdmissionWebhook.
see https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/server/options/admission.go#L69
This commit is contained in:
TigerXu
2018-01-13 07:06:14 +08:00
committed by Zach Corleissen
parent 9997927f1e
commit 77680299d9
+1 -1
View File
@@ -546,7 +546,7 @@ Yes.
For Kubernetes >= 1.9.0, we strongly recommend running the following set of admission controllers (order matters):
```shell
--admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,ValidatingAdmissionWebhook,ResourceQuota,DefaultTolerationSeconds,MutatingAdmissionWebhook
--admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,DefaultTolerationSeconds
```
It's worth reiterating that in 1.9 and up, these happen in a mutating phase