mirror of https://github.com/k3s-io/k3s
Remove NamespaceAutoProvision which is deprecated
According to https://github.com/kubernetes/kubernetes/blob/master/docs/admin/admission-controllers.md NamespaceAutoProvision is deprecated, keeping it in the script tends to give a bad practice where namespace are auto created. Suggest to remove it.pull/6/head
parent
5b6a7c6012
commit
6fa56de691
|
@ -214,9 +214,9 @@ function set_service_accounts {
|
|||
function start_apiserver {
|
||||
# Admission Controllers to invoke prior to persisting objects in cluster
|
||||
if [[ -z "${ALLOW_SECURITY_CONTEXT}" ]]; then
|
||||
ADMISSION_CONTROL=NamespaceLifecycle,NamespaceAutoProvision,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota
|
||||
ADMISSION_CONTROL=NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota
|
||||
else
|
||||
ADMISSION_CONTROL=NamespaceLifecycle,NamespaceAutoProvision,LimitRanger,ServiceAccount,ResourceQuota
|
||||
ADMISSION_CONTROL=NamespaceLifecycle,LimitRanger,ServiceAccount,ResourceQuota
|
||||
fi
|
||||
# This is the default dir and filename where the apiserver will generate a self-signed cert
|
||||
# which should be able to be used as the CA to verify itself
|
||||
|
|
Loading…
Reference in New Issue