From 667fcbd4eb9a271a8a8cad8b90567688cd6d3a34 Mon Sep 17 00:00:00 2001 From: Chao Xu Date: Mon, 30 Oct 2017 18:20:31 -0700 Subject: [PATCH] move the GenericAdmissionWebhook plugin to be after ResourceQuota to avoid charge quota prematurely --- cluster/gce/config-test.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cluster/gce/config-test.sh b/cluster/gce/config-test.sh index aed8d3ea673..8ad2bd7f14a 100755 --- a/cluster/gce/config-test.sh +++ b/cluster/gce/config-test.sh @@ -313,7 +313,7 @@ if [[ -z "${KUBE_ADMISSION_CONTROL:-}" ]]; then ADMISSION_CONTROL="${ADMISSION_CONTROL},PodSecurityPolicy" fi # ResourceQuota must come last, or a creation is recorded, but the pod may be forbidden. - ADMISSION_CONTROL="${ADMISSION_CONTROL},ResourceQuota,GenericAdmissionWebhook" + ADMISSION_CONTROL="${ADMISSION_CONTROL},GenericAdmissionWebhook,ResourceQuota" else ADMISSION_CONTROL=${KUBE_ADMISSION_CONTROL} fi