Remove SecurityContextDeny from 1.2 admission-control recommendation

ref kubernetes/kubernetes#25839
pull/531/head
Aaron Crickenberger 2016-05-18 16:08:14 -07:00
parent 7c8d7542ab
commit f068cbfaf2
1 changed files with 7 additions and 1 deletions

View File

@ -136,7 +136,13 @@ namespace. In order to enforce integrity of that process, we strongly recommend
Yes.
For Kubernetes 1.0, we strongly recommend running the following set of admission control plug-ins (order matters):
For Kubernetes >= 1.2.0, we strongly recommend running the following set of admission control plug-ins (order matters):
```shell
--admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,ResourceQuota
```
For Kubernetes >= 1.0.0, we strongly recommend running the following set of admission control plug-ins (order matters):
```shell
--admission-control=NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota