kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Add default enabled admission control plugins (#9784) 

* Add default enabled admission control plugins

* Docs feedback from zacharysarah
pull/9819/merge
Chao Wang 2018-09-25 06:35:25 +08:00 committed by k8s-ci-robot
parent 1cf4f5375d
commit 777d0757b6
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
content/en/docs/reference/access-authn-authz/admission-controllers.md
View File

@ -81,6 +81,20 @@ The Kubernetes API server flag `disable-admission-plugins` takes a comma-delimit
kube-apiserver --disable-admission-plugins=PodNodeSelector,AlwaysDeny ...
```
## Which plugins are enabled by default?
To see which admission plugins are enabled:
```shell
kube-apiserver -h | grep enable-admission-plugins
```
In 1.11, they are:
```shell
NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,Priority
```
## What does each admission controller do?
### AlwaysAdmit (DEPRECATED) {#alwaysadmit}