clean-up yaml variables surrounded by <> (#11490)
This commit is contained in:
committed by
Kubernetes Prow Robot
parent
7269c416ca
commit
854ee5779c
@@ -227,7 +227,7 @@ imagePolicy:
|
||||
# time in s to cache approval
|
||||
allowTTL: 50
|
||||
# time in s to cache denial
|
||||
denyTTL: 50
|
||||
denyTTL: 50
|
||||
# time in ms to wait between retries
|
||||
retryBackoff: 500
|
||||
# determines behavior if the webhook backend fails
|
||||
@@ -264,6 +264,7 @@ users:
|
||||
client-certificate: /path/to/cert.pem # cert for the webhook admission controller to use
|
||||
client-key: /path/to/key.pem # key matching the cert
|
||||
```
|
||||
|
||||
For additional HTTP configuration, refer to the [kubeconfig](/docs/concepts/cluster-administration/authenticate-across-clusters-kubeconfig/) documentation.
|
||||
|
||||
#### Request Payloads
|
||||
@@ -274,7 +275,7 @@ Note that webhook API objects are subject to the same versioning compatibility r
|
||||
|
||||
An example request body:
|
||||
|
||||
```
|
||||
```json
|
||||
{
|
||||
"apiVersion":"imagepolicy.k8s.io/v1alpha1",
|
||||
"kind":"ImageReview",
|
||||
@@ -297,7 +298,7 @@ An example request body:
|
||||
|
||||
The remote service is expected to fill the ImageReviewStatus field of the request and respond to either allow or disallow access. The response body's "spec" field is ignored and may be omitted. A permissive response would return:
|
||||
|
||||
```
|
||||
```json
|
||||
{
|
||||
"apiVersion": "imagepolicy.k8s.io/v1alpha1",
|
||||
"kind": "ImageReview",
|
||||
@@ -309,7 +310,7 @@ The remote service is expected to fill the ImageReviewStatus field of the reques
|
||||
|
||||
To disallow access, the service would return:
|
||||
|
||||
```
|
||||
```json
|
||||
{
|
||||
"apiVersion": "imagepolicy.k8s.io/v1alpha1",
|
||||
"kind": "ImageReview",
|
||||
@@ -468,9 +469,9 @@ This file may be json or yaml and has the following format:
|
||||
|
||||
```yaml
|
||||
podNodeSelectorPluginConfig:
|
||||
clusterDefaultNodeSelector: <node-selectors-labels>
|
||||
namespace1: <node-selectors-labels>
|
||||
namespace2: <node-selectors-labels>
|
||||
clusterDefaultNodeSelector: name-of-node-selector
|
||||
namespace1: name-of-node-selector
|
||||
namespace2: name-of-node-selector
|
||||
```
|
||||
|
||||
Reference the `PodNodeSelector` configuration file from the file provided to the API server's command line flag `--admission-control-config-file`:
|
||||
@@ -492,7 +493,7 @@ apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
annotations:
|
||||
scheduler.alpha.kubernetes.io/node-selector: <node-selectors-labels>
|
||||
scheduler.alpha.kubernetes.io/node-selector: name-of-node-selector
|
||||
name: namespace3
|
||||
```
|
||||
|
||||
|
||||
Reference in New Issue
Block a user