From f068cbfaf2b815431f6fdb16c5462d2c0e520cb0 Mon Sep 17 00:00:00 2001 From: Aaron Crickenberger Date: Wed, 18 May 2016 16:08:14 -0700 Subject: [PATCH] Remove SecurityContextDeny from 1.2 admission-control recommendation ref kubernetes/kubernetes#25839 --- docs/admin/admission-controllers.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/docs/admin/admission-controllers.md b/docs/admin/admission-controllers.md index 3af012fea7..59e998b83d 100644 --- a/docs/admin/admission-controllers.md +++ b/docs/admin/admission-controllers.md @@ -136,7 +136,13 @@ namespace. In order to enforce integrity of that process, we strongly recommend Yes. -For Kubernetes 1.0, we strongly recommend running the following set of admission control plug-ins (order matters): +For Kubernetes >= 1.2.0, we strongly recommend running the following set of admission control plug-ins (order matters): + +```shell +--admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,ResourceQuota +``` + +For Kubernetes >= 1.0.0, we strongly recommend running the following set of admission control plug-ins (order matters): ```shell --admission-control=NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota