---
# https://github.com/kubernetes-sigs/kubespray/blob/master/docs/operations/hardening.md
# list of admission plugins that needs to be configured
# https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/
kube_apiserver_enable_admission_plugins:
  - ServiceAccount
  - NodeRestriction
  - ResourceQuota
  - PodNodeSelector
kube_apiserver_admission_control_config_file: true