Browse Source

Merge "[k8s] Fix default admission controller"

changes/58/748458/6
Zuul 7 months ago
committed by Gerrit Code Review
parent
commit
1fba67448e
  1. 2
      magnum/drivers/k8s_fedora_coreos_v1/templates/kubecluster.yaml
  2. 5
      releasenotes/notes/default-admission-controller-04398548cf63597c.yaml

2
magnum/drivers/k8s_fedora_coreos_v1/templates/kubecluster.yaml

@ -222,7 +222,7 @@ parameters:
type: string
description: >
List of admission control plugins to activate
default: "NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,PersistentVolumeClaimResize,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,RuntimeClass"
default: "PodSecurityPolicy,NamespaceLifecycle,LimitRanger,ServiceAccount,ResourceQuota,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,PersistentVolumeClaimResize,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,RuntimeClass"
kube_allow_priv:
type: string

5
releasenotes/notes/default-admission-controller-04398548cf63597c.yaml

@ -0,0 +1,5 @@
---
upgrade:
- |
Now the default admission controller list is updated by as
"NodeRestriction, PodSecurityPolicy, NamespaceLifecycle, LimitRanger, ServiceAccount, ResourceQuota, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, RuntimeClass"
Loading…
Cancel
Save