whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #4132 from CaoShuFeng/NodeRestriction

Browse Source 
Update description about NodeRestriction
This commit is contained in:
Andrew Chen
2017-06-26 09:22:29 -07:00
committed by GitHub
parent c2bc54a4db 4bd94ec393
commit d7aeb5cf41
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/admin/admission-controllers.md
+4 -2
View File
@@ -300,8 +300,10 @@ for more information.
### NodeRestriction
This plug-in limits the `Node` and `Pod` objects a kubelet can modify. In order to be limited by this admission plugin, kubelets must use credentials in the `system:nodes` group, with a username in the form `system:node:<nodeName>`.
Such kubelets will only be allowed to modify their own `Node` API object, and only modify `Pod` API objects that are bound to their node.
This plug-in limits the `Node` and `Pod` objects a kubelet can modify. In order to be limited by this admission plugin,
kubelets must use credentials in the `system:nodes` group, with a username in the form `system:node:<nodeName>`. Such
kubelets will only be allowed to modify their own `Node` API object, only modify `Pod` API objects that are bound to
their node and only create mirror pods for their own [static pods](/docs/tasks/administer-cluster/static-pod/).
## Is there a recommended set of plug-ins to use?