whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove SecurityContextDeny from 1.2 admission-control recommendation

Browse Source 
ref kubernetes/kubernetes#25839
This commit is contained in:
Aaron Crickenberger
2016-05-18 16:08:14 -07:00
parent 7c8d7542ab
commit f068cbfaf2
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/admin/admission-controllers.md
+7 -1
View File
@@ -136,7 +136,13 @@ namespace. In order to enforce integrity of that process, we strongly recommend
Yes. Yes.
For Kubernetes 1.0, we strongly recommend running the following set of admission control plug-ins (order matters): For Kubernetes >= 1.2.0, we strongly recommend running the following set of admission control plug-ins (order matters):
```shell
--admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,ResourceQuota
```
For Kubernetes >= 1.0.0, we strongly recommend running the following set of admission control plug-ins (order matters):
```shell ```shell
--admission-control=NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota --admission-control=NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota