Merge pull request #11471 from VannTen/feat/config_plugin_list
Update the list of admission plugins which needs configpull/11002/head
commit
893e9cb177
|
@ -122,15 +122,6 @@
|
|||
- item in kube_apiserver_admission_plugins_needs_configuration
|
||||
loop: "{{ kube_apiserver_enable_admission_plugins }}"
|
||||
|
||||
- name: Kubeadm | Configure default cluster podnodeslector
|
||||
template:
|
||||
src: "podnodeselector.yaml.j2"
|
||||
dest: "{{ kube_config_dir }}/admission-controls/podnodeselector.yaml"
|
||||
mode: "0640"
|
||||
when:
|
||||
- kube_apiserver_admission_plugins_podnodeselector_default_node_selector is defined
|
||||
- kube_apiserver_admission_plugins_podnodeselector_default_node_selector | length > 0
|
||||
|
||||
- name: Kubeadm | Check apiserver.crt SANs
|
||||
vars:
|
||||
apiserver_ips: "{{ apiserver_sans | map('ansible.utils.ipaddr') | reject('equalto', False) | list }}"
|
||||
|
|
|
@ -1,3 +1,8 @@
|
|||
---
|
||||
# list of admission plugins that needs to be configured
|
||||
kube_apiserver_admission_plugins_needs_configuration: [EventRateLimit, PodSecurity]
|
||||
# https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/
|
||||
kube_apiserver_admission_plugins_needs_configuration:
|
||||
- EventRateLimit
|
||||
- ImagePolicyWebhook
|
||||
- PodSecurity
|
||||
- PodNodeSelector
|
||||
|
|
Loading…
Reference in New Issue