From 777d0757b6c2b495e9d268495e6b0ec8fc27e60f Mon Sep 17 00:00:00 2001 From: Chao Wang Date: Tue, 25 Sep 2018 06:35:25 +0800 Subject: [PATCH] Add default enabled admission control plugins (#9784) * Add default enabled admission control plugins * Docs feedback from zacharysarah --- .../access-authn-authz/admission-controllers.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/content/en/docs/reference/access-authn-authz/admission-controllers.md b/content/en/docs/reference/access-authn-authz/admission-controllers.md index 2dbc64a9db..1dabb38254 100644 --- a/content/en/docs/reference/access-authn-authz/admission-controllers.md +++ b/content/en/docs/reference/access-authn-authz/admission-controllers.md @@ -81,6 +81,20 @@ The Kubernetes API server flag `disable-admission-plugins` takes a comma-delimit kube-apiserver --disable-admission-plugins=PodNodeSelector,AlwaysDeny ... ``` +## Which plugins are enabled by default? + +To see which admission plugins are enabled: + +```shell +kube-apiserver -h | grep enable-admission-plugins +``` + +In 1.11, they are: + +```shell +NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,Priority +``` + ## What does each admission controller do? ### AlwaysAdmit (DEPRECATED) {#alwaysadmit}