kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Update description about NodeRestriction 

kubelet node can alse create mirror pods for their own static pods.
pull/4132/head
Cao Shufeng 2017-06-19 11:35:25 +08:00
parent ccd2b46864
commit 4bd94ec393
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/admin/admission-controllers.md
View File

@ -270,8 +270,10 @@ for more information.
### NodeRestriction
This plug-in limits the `Node` and `Pod` objects a kubelet can modify. In order to be limited by this admission plugin, kubelets must use credentials in the `system:nodes` group, with a username in the form `system:node:<nodeName>`.
Such kubelets will only be allowed to modify their own `Node` API object, and only modify `Pod` API objects that are bound to their node.
This plug-in limits the `Node` and `Pod` objects a kubelet can modify. In order to be limited by this admission plugin,
kubelets must use credentials in the `system:nodes` group, with a username in the form `system:node:<nodeName>`. Such
kubelets will only be allowed to modify their own `Node` API object, only modify `Pod` API objects that are bound to
their node and only create mirror pods for their own [static pods](/docs/tasks/administer-cluster/static-pod/).
## Is there a recommended set of plug-ins to use?