Skip to content

Latest commit

 

History

History
21 lines (21 loc) · 1.72 KB

cluster.md

File metadata and controls

21 lines (21 loc) · 1.72 KB
Raw

apiserver enbled plugins

kubectl -n kube-system exec kube-apiserver-talos-alloy-102-control-plane-kccvj -it -- kube-apiserver -h | grep "default enabled ones"
  --enable-admission-plugins strings       admission plugins that should be enabled in addition to default enabled ones (
  NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, PodSecurity, Priority, 
  DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, 
  RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, 
  MutatingAdmissionWebhook, ValidatingAdmissionPolicy, ValidatingAdmissionWebhook, ResourceQuota). 
  Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, 
  CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, 
  DefaultTolerationSeconds, DenyServiceExternalIPs, EventRateLimit, ExtendedResourceToleration, 
  ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, 
  NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, 
  OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, 
  PodSecurity, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, 
  ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionPolicy, 
  ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.

debugging envoy