Add default enabled admission control plugins (#9784)

* Add default enabled admission control plugins * Docs feedback from zacharysarah
2018-09-25 06:35:25 +08:00
parent 1cf4f5375d
commit 777d0757b6
1 changed files with 14 additions and 0 deletions
@@ -81,6 +81,20 @@ The Kubernetes API server flag `disable-admission-plugins` takes a comma-delimit
 kube-apiserver --disable-admission-plugins=PodNodeSelector,AlwaysDeny ...
 ```

+## Which plugins are enabled by default?
+
+To see which admission plugins are enabled:
+
+```shell
+kube-apiserver -h | grep enable-admission-plugins
+```
+
+In 1.11, they are:
+ 
+```shell
+NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,Priority
+```
+
 ## What does each admission controller do?

 ### AlwaysAdmit (DEPRECATED) {#alwaysadmit}