-
Notifications
You must be signed in to change notification settings - Fork 14.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix admission plugins orders #6900
Conversation
fix admission plugins orders, MutatingAdmissionWebhook should be ahead of ValidatingAdmissionWebhook. see https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/server/options/admission.go#L69
/assign @tengqm |
Deploy preview ready! Built with commit 1ad787a https://deploy-preview-6900--kubernetes-io-master-staging.netlify.com |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
According to the source code, there are comments like this:
// This list is mix of mutating admission plugins and validating
// admission plugins. The apiserver always runs the validating ones
// after all the mutating ones, so their relative order in this list
// doesn't matter.
So, if the code works as designed, the order should not matter. However, moving mutating ahead of validating sounds a better recommendation.
@tengqm That's what i mean to, we should not mislead users. |
/lgtm |
…henopis-user-journeys * 'master' of https://github.com/kubernetes/website: fix admission plugins orders (#6900) link to other terms (#6625) Fix See Also links. (#6948) --experimental-nvidia-gpus error (#6527) Add HA guide for kubeadm (#6458) remove duplicated and conflicted TOC instrument fix deadlink Clarify the token webhook posts the TokenReview object Update federation.md Update create-cluster-kubeadm.md Add note about viewing changes locally. (#6936) Create page that lists supported doc versions. (#6882) Document how to generate reference pages. (#6366) Update networking.md to list ACI CNI plugin (#6367) Update kubeadm-init.md (#6932) fix typo in doc kubeadm-alpha dulplicated sentences Update certificates.md Replace all kube-ui with kubernetes dashboard Add openstack internal load balancer option
fix admission plugins orders, MutatingAdmissionWebhook should be ahead of ValidatingAdmissionWebhook.
see https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/server/options/admission.go#L69
This change is