mirror of
				https://github.com/optim-enterprises-bv/kubernetes.git
				synced 2025-11-03 19:58:17 +00:00 
			
		
		
		
	add RuntimeClass admission controller plugin
Signed-off-by: Eric Ernst <eric.ernst@intel.com>
This commit is contained in:
		@@ -41,6 +41,7 @@ import (
 | 
				
			|||||||
	"k8s.io/kubernetes/plugin/pkg/admission/podtolerationrestriction"
 | 
						"k8s.io/kubernetes/plugin/pkg/admission/podtolerationrestriction"
 | 
				
			||||||
	podpriority "k8s.io/kubernetes/plugin/pkg/admission/priority"
 | 
						podpriority "k8s.io/kubernetes/plugin/pkg/admission/priority"
 | 
				
			||||||
	"k8s.io/kubernetes/plugin/pkg/admission/resourcequota"
 | 
						"k8s.io/kubernetes/plugin/pkg/admission/resourcequota"
 | 
				
			||||||
 | 
						"k8s.io/kubernetes/plugin/pkg/admission/runtimeclass"
 | 
				
			||||||
	"k8s.io/kubernetes/plugin/pkg/admission/security/podsecuritypolicy"
 | 
						"k8s.io/kubernetes/plugin/pkg/admission/security/podsecuritypolicy"
 | 
				
			||||||
	"k8s.io/kubernetes/plugin/pkg/admission/securitycontext/scdeny"
 | 
						"k8s.io/kubernetes/plugin/pkg/admission/securitycontext/scdeny"
 | 
				
			||||||
	"k8s.io/kubernetes/plugin/pkg/admission/serviceaccount"
 | 
						"k8s.io/kubernetes/plugin/pkg/admission/serviceaccount"
 | 
				
			||||||
@@ -89,6 +90,7 @@ var AllOrderedPlugins = []string{
 | 
				
			|||||||
	resize.PluginName,                       // PersistentVolumeClaimResize
 | 
						resize.PluginName,                       // PersistentVolumeClaimResize
 | 
				
			||||||
	mutatingwebhook.PluginName,              // MutatingAdmissionWebhook
 | 
						mutatingwebhook.PluginName,              // MutatingAdmissionWebhook
 | 
				
			||||||
	validatingwebhook.PluginName,            // ValidatingAdmissionWebhook
 | 
						validatingwebhook.PluginName,            // ValidatingAdmissionWebhook
 | 
				
			||||||
 | 
						runtimeclass.PluginName,                 //RuntimeClass
 | 
				
			||||||
	resourcequota.PluginName,                // ResourceQuota
 | 
						resourcequota.PluginName,                // ResourceQuota
 | 
				
			||||||
	deny.PluginName,                         // AlwaysDeny
 | 
						deny.PluginName,                         // AlwaysDeny
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
@@ -115,6 +117,7 @@ func RegisterAllAdmissionPlugins(plugins *admission.Plugins) {
 | 
				
			|||||||
	podnodeselector.Register(plugins)
 | 
						podnodeselector.Register(plugins)
 | 
				
			||||||
	podpreset.Register(plugins)
 | 
						podpreset.Register(plugins)
 | 
				
			||||||
	podtolerationrestriction.Register(plugins)
 | 
						podtolerationrestriction.Register(plugins)
 | 
				
			||||||
 | 
						runtimeclass.Register(plugins)
 | 
				
			||||||
	resourcequota.Register(plugins)
 | 
						resourcequota.Register(plugins)
 | 
				
			||||||
	podsecuritypolicy.Register(plugins)
 | 
						podsecuritypolicy.Register(plugins)
 | 
				
			||||||
	podpriority.Register(plugins)
 | 
						podpriority.Register(plugins)
 | 
				
			||||||
@@ -148,5 +151,9 @@ func DefaultOffAdmissionPlugins() sets.String {
 | 
				
			|||||||
		defaultOnPlugins.Insert(nodetaint.PluginName) //TaintNodesByCondition
 | 
							defaultOnPlugins.Insert(nodetaint.PluginName) //TaintNodesByCondition
 | 
				
			||||||
	}
 | 
						}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
						if utilfeature.DefaultFeatureGate.Enabled(features.PodOverhead) {
 | 
				
			||||||
 | 
							defaultOnPlugins.Insert(runtimeclass.PluginName) //RuntimeClass
 | 
				
			||||||
 | 
						}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
	return sets.NewString(AllOrderedPlugins...).Difference(defaultOnPlugins)
 | 
						return sets.NewString(AllOrderedPlugins...).Difference(defaultOnPlugins)
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user