github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Removed DenyEscalatingExec from the list of default admission controllers.

Browse Source
This commit is contained in:
Abhishek Shah
2015-10-02 16:05:10 -07:00
parent 4856c7c033
commit a1b6dbe870
12 changed files with 13 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/getting-started-guides/coreos/cloud-configs/master.yaml
View File

@@ -89,7 +89,7 @@ coreos:
ExecStart=/opt/bin/kube-apiserver \
--service-account-key-file=/opt/bin/kube-serviceaccount.key \
--service-account-lookup=false \
--admission-control=NamespaceLifecycle,NamespaceAutoProvision,LimitRanger,SecurityContextDeny,ServiceAccount,DenyEscalatingExec,ResourceQuota \
--admission-control=NamespaceLifecycle,NamespaceAutoProvision,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota \
--runtime-config=api/v1 \
--allow-privileged=true \
--insecure-bind-address=0.0.0.0 \