github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-09-21 09:57:52 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #78484 from egernst/runtimeclass-admission

Browse Source 
Runtimeclass admission
This commit is contained in:
Kubernetes Prow Robot
2019-06-28 23:35:24 -07:00
committed by GitHub
parent 5154a61325 824a9e592a
commit e4f1588352
7 changed files with 527 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
pkg/kubeapiserver/options/BUILD
View File

@@ -43,6 +43,7 @@ go_library(
"//plugin/pkg/admission/podtolerationrestriction:go_default_library",
"//plugin/pkg/admission/priority:go_default_library",
"//plugin/pkg/admission/resourcequota:go_default_library",
"//plugin/pkg/admission/runtimeclass:go_default_library",
"//plugin/pkg/admission/security/podsecuritypolicy:go_default_library",
"//plugin/pkg/admission/securitycontext/scdeny:go_default_library",
"//plugin/pkg/admission/serviceaccount:go_default_library",

7
pkg/kubeapiserver/options/plugins.go
View File

@@ -41,6 +41,7 @@ import (
"k8s.io/kubernetes/plugin/pkg/admission/podtolerationrestriction"
podpriority "k8s.io/kubernetes/plugin/pkg/admission/priority"
"k8s.io/kubernetes/plugin/pkg/admission/resourcequota"
"k8s.io/kubernetes/plugin/pkg/admission/runtimeclass"
"k8s.io/kubernetes/plugin/pkg/admission/security/podsecuritypolicy"
"k8s.io/kubernetes/plugin/pkg/admission/securitycontext/scdeny"
"k8s.io/kubernetes/plugin/pkg/admission/serviceaccount"
@@ -89,6 +90,7 @@ var AllOrderedPlugins = []string{
resize.PluginName, // PersistentVolumeClaimResize
mutatingwebhook.PluginName, // MutatingAdmissionWebhook
validatingwebhook.PluginName, // ValidatingAdmissionWebhook
runtimeclass.PluginName, //RuntimeClass
resourcequota.PluginName, // ResourceQuota
deny.PluginName, // AlwaysDeny
}
@@ -115,6 +117,7 @@ func RegisterAllAdmissionPlugins(plugins *admission.Plugins) {
podnodeselector.Register(plugins)
podpreset.Register(plugins)
podtolerationrestriction.Register(plugins)
runtimeclass.Register(plugins)
resourcequota.Register(plugins)
podsecuritypolicy.Register(plugins)
podpriority.Register(plugins)
@@ -145,5 +148,9 @@ func DefaultOffAdmissionPlugins() sets.String {
defaultOnPlugins.Insert(nodetaint.PluginName) //TaintNodesByCondition
}
if utilfeature.DefaultFeatureGate.Enabled(features.PodOverhead) {
defaultOnPlugins.Insert(runtimeclass.PluginName) //RuntimeClass
}
return sets.NewString(AllOrderedPlugins...).Difference(defaultOnPlugins)
}