mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-09-15 22:20:51 +00:00
add RuntimeClass admission controller plugin
Signed-off-by: Eric Ernst <eric.ernst@intel.com>
This commit is contained in:
@@ -41,6 +41,7 @@ import (
|
|||||||
"k8s.io/kubernetes/plugin/pkg/admission/podtolerationrestriction"
|
"k8s.io/kubernetes/plugin/pkg/admission/podtolerationrestriction"
|
||||||
podpriority "k8s.io/kubernetes/plugin/pkg/admission/priority"
|
podpriority "k8s.io/kubernetes/plugin/pkg/admission/priority"
|
||||||
"k8s.io/kubernetes/plugin/pkg/admission/resourcequota"
|
"k8s.io/kubernetes/plugin/pkg/admission/resourcequota"
|
||||||
|
"k8s.io/kubernetes/plugin/pkg/admission/runtimeclass"
|
||||||
"k8s.io/kubernetes/plugin/pkg/admission/security/podsecuritypolicy"
|
"k8s.io/kubernetes/plugin/pkg/admission/security/podsecuritypolicy"
|
||||||
"k8s.io/kubernetes/plugin/pkg/admission/securitycontext/scdeny"
|
"k8s.io/kubernetes/plugin/pkg/admission/securitycontext/scdeny"
|
||||||
"k8s.io/kubernetes/plugin/pkg/admission/serviceaccount"
|
"k8s.io/kubernetes/plugin/pkg/admission/serviceaccount"
|
||||||
@@ -89,6 +90,7 @@ var AllOrderedPlugins = []string{
|
|||||||
resize.PluginName, // PersistentVolumeClaimResize
|
resize.PluginName, // PersistentVolumeClaimResize
|
||||||
mutatingwebhook.PluginName, // MutatingAdmissionWebhook
|
mutatingwebhook.PluginName, // MutatingAdmissionWebhook
|
||||||
validatingwebhook.PluginName, // ValidatingAdmissionWebhook
|
validatingwebhook.PluginName, // ValidatingAdmissionWebhook
|
||||||
|
runtimeclass.PluginName, //RuntimeClass
|
||||||
resourcequota.PluginName, // ResourceQuota
|
resourcequota.PluginName, // ResourceQuota
|
||||||
deny.PluginName, // AlwaysDeny
|
deny.PluginName, // AlwaysDeny
|
||||||
}
|
}
|
||||||
@@ -115,6 +117,7 @@ func RegisterAllAdmissionPlugins(plugins *admission.Plugins) {
|
|||||||
podnodeselector.Register(plugins)
|
podnodeselector.Register(plugins)
|
||||||
podpreset.Register(plugins)
|
podpreset.Register(plugins)
|
||||||
podtolerationrestriction.Register(plugins)
|
podtolerationrestriction.Register(plugins)
|
||||||
|
runtimeclass.Register(plugins)
|
||||||
resourcequota.Register(plugins)
|
resourcequota.Register(plugins)
|
||||||
podsecuritypolicy.Register(plugins)
|
podsecuritypolicy.Register(plugins)
|
||||||
podpriority.Register(plugins)
|
podpriority.Register(plugins)
|
||||||
@@ -148,5 +151,9 @@ func DefaultOffAdmissionPlugins() sets.String {
|
|||||||
defaultOnPlugins.Insert(nodetaint.PluginName) //TaintNodesByCondition
|
defaultOnPlugins.Insert(nodetaint.PluginName) //TaintNodesByCondition
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if utilfeature.DefaultFeatureGate.Enabled(features.PodOverhead) {
|
||||||
|
defaultOnPlugins.Insert(runtimeclass.PluginName) //RuntimeClass
|
||||||
|
}
|
||||||
|
|
||||||
return sets.NewString(AllOrderedPlugins...).Difference(defaultOnPlugins)
|
return sets.NewString(AllOrderedPlugins...).Difference(defaultOnPlugins)
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user