Add NodeRestriction admission plugin

This commit is contained in:
Jordan Liggitt
2017-05-16 16:09:28 -04:00
parent 0c516c3ac2
commit 6fd36792f1
8 changed files with 747 additions and 0 deletions

View File

@@ -388,6 +388,9 @@ function start_apiserver {
if [[ -n "${PSP_ADMISSION}" ]]; then
security_admission=",PodSecurityPolicy"
fi
if [[ -n "${NODE_ADMISSION}" ]]; then
security_admission=",NodeRestriction"
fi
# Admission Controllers to invoke prior to persisting objects in cluster
ADMISSION_CONTROL=NamespaceLifecycle,LimitRanger,ServiceAccount${security_admission},ResourceQuota,DefaultStorageClass,DefaultTolerationSeconds