From 5049382a818d92074c1531583a29005d1d53300b Mon Sep 17 00:00:00 2001 From: mtardy Date: Sun, 19 Feb 2023 13:04:45 +0100 Subject: [PATCH] Scdeny admission plugin: add warning on register --- plugin/pkg/admission/securitycontext/scdeny/admission.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/plugin/pkg/admission/securitycontext/scdeny/admission.go b/plugin/pkg/admission/securitycontext/scdeny/admission.go index c5da558c7bf..9924b5e91b5 100644 --- a/plugin/pkg/admission/securitycontext/scdeny/admission.go +++ b/plugin/pkg/admission/securitycontext/scdeny/admission.go @@ -23,6 +23,7 @@ import ( apierrors "k8s.io/apimachinery/pkg/api/errors" "k8s.io/apiserver/pkg/admission" + "k8s.io/klog/v2" api "k8s.io/kubernetes/pkg/apis/core" ) @@ -45,6 +46,11 @@ var _ admission.ValidationInterface = &Plugin{} // NewSecurityContextDeny creates a new instance of the SecurityContextDeny admission controller func NewSecurityContextDeny() *Plugin { + // DEPRECATED: SecurityContextDeny will be removed in favor of PodSecurity admission. + klog.Warningf("%s admission controller is deprecated. "+ + "Please remove this controller from your configuration files and scripts. "+ + "See https://k8s.io/docs/reference/access-authn-authz/admission-controllers/#securitycontextdeny for more information.", + PluginName) return &Plugin{ Handler: admission.NewHandler(admission.Create, admission.Update), }