services.kubernetes.apiserver.enableAdmissionPlugins

Kubernetes admission control plugins to enable. See https://kubernetes.io/docs/admin/admission-controllers/

Declarations

nixos/modules/services/cluster/kubernetes/apiserver.nix

Type

list of string

Default

[
  "NamespaceLifecycle"
  "LimitRanger"
  "ServiceAccount"
  "ResourceQuota"
  "DefaultStorageClass"
  "DefaultTolerationSeconds"
  "NodeRestriction"
]

Example

[
  "NamespaceLifecycle"
  "NamespaceExists"
  "LimitRanger"
  "SecurityContextDeny"
  "ServiceAccount"
  "ResourceQuota"
  "PodSecurityPolicy"
  "NodeRestriction"
  "DefaultStorageClass"
]