From 8830e7b84ebf6210cefeda4b6522ad4600897138 Mon Sep 17 00:00:00 2001 From: Eric Paris Date: Wed, 17 Jun 2015 15:38:33 -0400 Subject: [PATCH] Follow upstream default admission controllers --- contrib/ansible/roles/master/templates/apiserver.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/contrib/ansible/roles/master/templates/apiserver.j2 b/contrib/ansible/roles/master/templates/apiserver.j2 index c389419c596..875db079f3d 100644 --- a/contrib/ansible/roles/master/templates/apiserver.j2 +++ b/contrib/ansible/roles/master/templates/apiserver.j2 @@ -20,7 +20,7 @@ KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range={{ kube_service_addresses }}" KUBE_ETCD_SERVERS="--etcd_servers=http://{{ groups['etcd'][0] }}:2379" # default admission control policies -KUBE_ADMISSION_CONTROL="--admission_control=NamespaceAutoProvision,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota" +KUBE_ADMISSION_CONTROL="--admission_control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota" # Add your own! KUBE_API_ARGS=""