From 6fa56de6919765a7186d288cdf22636e2e4fa60c Mon Sep 17 00:00:00 2001 From: runseb Date: Thu, 17 Dec 2015 11:05:20 +0100 Subject: [PATCH] Remove NamespaceAutoProvision which is deprecated According to https://github.com/kubernetes/kubernetes/blob/master/docs/admin/admission-controllers.md NamespaceAutoProvision is deprecated, keeping it in the script tends to give a bad practice where namespace are auto created. Suggest to remove it. --- hack/local-up-cluster.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/hack/local-up-cluster.sh b/hack/local-up-cluster.sh index 234fb04450a..8ae3d51a480 100755 --- a/hack/local-up-cluster.sh +++ b/hack/local-up-cluster.sh @@ -214,9 +214,9 @@ function set_service_accounts { function start_apiserver { # Admission Controllers to invoke prior to persisting objects in cluster if [[ -z "${ALLOW_SECURITY_CONTEXT}" ]]; then - ADMISSION_CONTROL=NamespaceLifecycle,NamespaceAutoProvision,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota + ADMISSION_CONTROL=NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota else - ADMISSION_CONTROL=NamespaceLifecycle,NamespaceAutoProvision,LimitRanger,ServiceAccount,ResourceQuota + ADMISSION_CONTROL=NamespaceLifecycle,LimitRanger,ServiceAccount,ResourceQuota fi # This is the default dir and filename where the apiserver will generate a self-signed cert # which should be able to be used as the CA to verify itself