rancher/rke
1
0
Fork 0
mirror of https://github.com/rancher/rke.git synced 2025-09-18 08:06:20 +00:00
Code Issues Releases Wiki Activity

set the default PodSecurityConfiguration value only if the cluster's k8s version is at least 1.23

Browse Source
This commit is contained in:
Jiaqi Luo
2023-06-14 16:29:39 -07:00
parent 0a57323164
commit 977df320db
2 changed files with 17 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
cluster/hosts.go
View File

@@ -167,11 +167,17 @@ func (c *Cluster) getConsolidatedAdmissionConfiguration() (*apiserverv1.Admissio
_ = setPluginConfiguration(admissionConfig, ertConfig)
// PodSecurity
psConfig, err := c.getPodSecurityAdmissionPluginConfiguration()
parsedVersion, err := getClusterVersion(c.Version)
if err != nil {
return nil, err
}
_ = setPluginConfiguration(admissionConfig, psConfig)
if parsedRangeAtLeast123(parsedVersion) {
psConfig, err := c.getPodSecurityAdmissionPluginConfiguration()
if err != nil {
return nil, err
}
_ = setPluginConfiguration(admissionConfig, psConfig)
}
return admissionConfig, nil
}