From 7b6d15f7e19c1b5c35d547cf1b6957cc60b07cb7 Mon Sep 17 00:00:00 2001 From: Bob Killen Date: Sat, 7 Jul 2018 09:52:18 -0400 Subject: [PATCH] Correct internal behavior list in admission-controllers doc (#9409) * correct internal behavior list in admission-controllers doc * remove leading indentation in ordered list --- .../access-authn-authz/admission-controllers.md | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/content/en/docs/reference/access-authn-authz/admission-controllers.md b/content/en/docs/reference/access-authn-authz/admission-controllers.md index 419576c293..59aac722c4 100644 --- a/content/en/docs/reference/access-authn-authz/admission-controllers.md +++ b/content/en/docs/reference/access-authn-authz/admission-controllers.md @@ -465,13 +465,14 @@ metadata: #### Internal Behavior This admission controller has the following behavior: - 1. If the `Namespace` has an annotation with a key `scheduler.alpha.kubernetes.io/node-selector`, use its value as the - node selector. - 1. If the namespace lacks such an annotation, use the `clusterDefaultNodeSelector` defined in the `PodNodeSelector` - plugin configuration file as the node selector. - 1. Evaluate the pod's node selector against the namespace node selector for conflicts. Conflicts result in rejection. - 1. Evaluate the pod's node selector against the namespace-specific whitelist defined the plugin configuration file. - Conflicts result in rejection. + +1. If the `Namespace` has an annotation with a key `scheduler.alpha.kubernetes.io/node-selector`, use its value as the +node selector. +2. If the namespace lacks such an annotation, use the `clusterDefaultNodeSelector` defined in the `PodNodeSelector` +plugin configuration file as the node selector. +3. Evaluate the pod's node selector against the namespace node selector for conflicts. Conflicts result in rejection. +4. Evaluate the pod's node selector against the namespace-specific whitelist defined the plugin configuration file. +Conflicts result in rejection. {{< note >}} **Note:** PodNodeSelector allows forcing pods to run on specifically labeled nodes. Also see the PodTolerationRestriction