The Kubernetes admission controller 'AlwaysAdmit' should be disabled
Set up the kubernetes integration.
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Description
The cluster should not allow all requests. The AlwaysAdmit
admission controller plugin allows all requests and does not filter any requests; it should not be enabled.
- Edit the API server pod specification file
/etc/kubernetes/manifests/kube-apiserver.yaml
on the master node and either remove the --enable-admission-plugins
parameter, or set it to a value that does not include AlwaysAdmit
.
Note: The AlwaysAdmit
admission controller was deprecated in v1.13 and should not be used. Its behavior is equivalent to having no admission controller. Refer to the Kubernetes admission controller documentation for additional information.