whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add default enabled admission control plugins (#9784)

Browse Source 
* Add default enabled admission control plugins

* Docs feedback from zacharysarah
This commit is contained in:
Chao Wang
2018-09-25 06:35:25 +08:00
committed by k8s-ci-robot
parent 1cf4f5375d
commit 777d0757b6
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/reference/access-authn-authz/admission-controllers.md
+14
View File
@@ -81,6 +81,20 @@ The Kubernetes API server flag `disable-admission-plugins` takes a comma-delimit
kube-apiserver --disable-admission-plugins=PodNodeSelector,AlwaysDeny ... kube-apiserver --disable-admission-plugins=PodNodeSelector,AlwaysDeny ...
``` ```
## Which plugins are enabled by default?
To see which admission plugins are enabled:
```shell
kube-apiserver -h | grep enable-admission-plugins
```
In 1.11, they are:
```shell
NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,Priority
```
## What does each admission controller do? ## What does each admission controller do?
### AlwaysAdmit (DEPRECATED) {#alwaysadmit} ### AlwaysAdmit (DEPRECATED) {#alwaysadmit}