mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-03 09:22:44 +00:00
move the GenericAdmissionWebhook plugin to be after ResourceQuota to
avoid charge quota prematurely
This commit is contained in:
parent
7d759ba0c9
commit
667fcbd4eb
@ -313,7 +313,7 @@ if [[ -z "${KUBE_ADMISSION_CONTROL:-}" ]]; then
|
|||||||
ADMISSION_CONTROL="${ADMISSION_CONTROL},PodSecurityPolicy"
|
ADMISSION_CONTROL="${ADMISSION_CONTROL},PodSecurityPolicy"
|
||||||
fi
|
fi
|
||||||
# ResourceQuota must come last, or a creation is recorded, but the pod may be forbidden.
|
# ResourceQuota must come last, or a creation is recorded, but the pod may be forbidden.
|
||||||
ADMISSION_CONTROL="${ADMISSION_CONTROL},ResourceQuota,GenericAdmissionWebhook"
|
ADMISSION_CONTROL="${ADMISSION_CONTROL},GenericAdmissionWebhook,ResourceQuota"
|
||||||
else
|
else
|
||||||
ADMISSION_CONTROL=${KUBE_ADMISSION_CONTROL}
|
ADMISSION_CONTROL=${KUBE_ADMISSION_CONTROL}
|
||||||
fi
|
fi
|
||||||
|
Loading…
Reference in New Issue
Block a user