Kubernetes admission controllers check

10/26/2019

How can I check which admission controllers are enabled by default on the cluster using some command like kubectl.

-- Ijaz Ahmad Khan
kubectl
kubernetes

2 Answers

10/28/2019

You can try using the following command Kubectl cluster-info dump | grep -i admission

-- Praveen
Source: StackOverflow

10/26/2019

There is no subcommand to list the enable admission controller with kubectl.

Nevertheless, you can get this information from kube-apiserver admission controller enabled-by-default

kube-apiserver -h | grep enable-admission-plugins

for k8s 1.16

  • NamespaceLifecycle
  • LimitRanger
  • ServiceAccount
  • TaintNodesByCondition
  • Priority
  • DefaultTolerationSeconds,
  • DefaultStorageClass
  • StorageObjectInUseProtection,
  • PersistentVolumeClaimResize
  • MutatingAdmissionWebhook,
  • ValidatingAdmissionWebhook
  • RuntimeClass
  • ResourceQuota
-- Suresh Vishnoi
Source: StackOverflow