c624512d29
Co-authored-by: denis.patrakeev <denis.patrakeev@avroid.tech> Reviewed-on: https://git.avroid.tech/K8s/k8s-deploy/pulls/8
11 lines
398 B
YAML
11 lines
398 B
YAML
---
|
|
# https://github.com/kubernetes-sigs/kubespray/blob/master/docs/operations/hardening.md
|
|
# list of admission plugins that needs to be configured
|
|
# https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/
|
|
kube_apiserver_enable_admission_plugins:
|
|
- ServiceAccount
|
|
- NodeRestriction
|
|
- ResourceQuota
|
|
- PodNodeSelector
|
|
kube_apiserver_admission_control_config_file: true
|