Skip to content

Commit

Permalink
docs: forbidden node labels and annotations. Version restrictions
Browse files Browse the repository at this point in the history
  • Loading branch information
Maksim Fedotov committed Oct 28, 2021
1 parent ab3ecfe commit 03819a0
Showing 1 changed file with 8 additions and 0 deletions.
8 changes: 8 additions & 0 deletions docs/operator/use-cases/node-labels-and-annotations.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,13 @@
# Denying specific user-defined labels or annotations on Nodes

**Important note**

Due to [CVE-2021-25735](https://github.com/kubernetes/kubernetes/issues/100096) this feature is only supported for Kubernetes version older than:
* v1.18.18
* v1.19.10
* v1.20.6
* v1.21.0

When using `capsule` together with [capsule-proxy](https://github.com/clastix/capsule-proxy), Bill can allow Tenant Owners to [modify Nodes](../../proxy/overview.md).

By default, it will allow tenant owners to add and modify any label or annotation on their nodes.
Expand Down

0 comments on commit 03819a0

Please sign in to comment.