feat(kops): add admission control to kube api server (#284)

cloudposse · Sep 24, 2018 · 24847fb · 24847fb
1 parent c1e9476
commit 24847fb
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/rootfs/templates/kops/default.yaml b/rootfs/templates/kops/default.yaml
@@ -54,6 +54,20 @@ spec:
     authenticationTokenWebhookConfigFile: /srv/kubernetes/aws-iam-authenticator/kubeconfig.yaml
     {{- end }}
   {{- end }}
+  {{- if bool (getenv "KOPS_ADMISSION_CONTROL_ENABLED" "true") }}
+    admissionControl:
+    - NamespaceLifecycle
+    - LimitRanger
+    - ServiceAccount
+    - PersistentVolumeLabel
+    - DefaultStorageClass
+    - DefaultTolerationSeconds
+    - MutatingAdmissionWebhook
+    - ValidatingAdmissionWebhook
+    - ResourceQuota
+    - NodeRestriction
+    - Priority
+  {{- end }}
   authorization:
     {{- if bool (getenv "KOPS_AUTHORIZATION_RBAC_ENABLED" "false") }}
     rbac: {}