Add OwnerReferencesPermissionEnforcement

Signed-off-by: Or Shoval <oshoval@redhat.com>
kubevirt · Aug 18, 2024 · 1860726 · 1860726
1 parent a0ad335
commit 1860726
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/cluster-provision/k8s/1.28/manifests/kubeadm.conf b/cluster-provision/k8s/1.28/manifests/kubeadm.conf
@@ -17,7 +17,7 @@ apiServer:
     audit-log-format: json
     audit-log-path: /var/log/k8s-audit/k8s-audit.log
     audit-policy-file: /etc/kubernetes/audit/adv-audit.yaml
-    enable-admission-plugins: NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,NodeRestriction,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota
+    enable-admission-plugins: NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,NodeRestriction,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,OwnerReferencesPermissionEnforcement
     admission-control-config-file: /etc/kubernetes/psa.yaml
   extraVolumes:
   - hostPath: /etc/kubernetes/psa.yaml

diff --git a/cluster-provision/k8s/1.28/manifests/kubeadm_ipv6.conf b/cluster-provision/k8s/1.28/manifests/kubeadm_ipv6.conf
@@ -23,7 +23,7 @@ apiServer:
     audit-log-format: json
     audit-log-path: /var/log/k8s-audit/k8s-audit.log
     audit-policy-file: /etc/kubernetes/audit/adv-audit.yaml
-    enable-admission-plugins: NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,NodeRestriction,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota
+    enable-admission-plugins: NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,NodeRestriction,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,OwnerReferencesPermissionEnforcement
     bind-address: "::"
     admission-control-config-file: /etc/kubernetes/psa.yaml
   extraVolumes: