From c9cff5c84526564e7538fc317912e497233f4ecf Mon Sep 17 00:00:00 2001 From: Spencer Smith Date: Fri, 8 Jul 2016 10:04:14 -0700 Subject: [PATCH] updated admission controllers for >1.2 Kubernetes --- roles/kubernetes/master/templates/kube-apiserver.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/kubernetes/master/templates/kube-apiserver.j2 b/roles/kubernetes/master/templates/kube-apiserver.j2 index 61cb561ab..07ed59cc6 100644 --- a/roles/kubernetes/master/templates/kube-apiserver.j2 +++ b/roles/kubernetes/master/templates/kube-apiserver.j2 @@ -33,7 +33,7 @@ KUBE_ETCD_SERVERS="--etcd_servers={% for host in groups['etcd'] %}http://{{ host KUBE_API_ADDRESS="--bind-address={{ ip | default(ansible_default_ipv4.address) }}" # default admission control policies -KUBE_ADMISSION_CONTROL="--admission_control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota" +KUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,ResourceQuota" # RUNTIME API CONFIGURATION (e.g. enable extensions) KUBE_RUNTIME_CONFIG="{% if kube_api_runtime_config is defined %}{% for conf in kube_api_runtime_config %}--runtime-config={{ conf }} {% endfor %}{% endif %}"