From 4c12b273ac46e0ca0a1b40d93ae5437637b65c6c Mon Sep 17 00:00:00 2001 From: Marcelo Grebois Date: Mon, 9 Apr 2018 12:49:05 +0200 Subject: [PATCH 1/2] Enabling MutatingAdmissionWebhook for Istio Automatic sidecar injection https://istio.io/docs/setup/kubernetes/sidecar-injection.html#automatic-sidecar-injection --- roles/kubernetes/master/defaults/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/kubernetes/master/defaults/main.yml b/roles/kubernetes/master/defaults/main.yml index 6325bb31c..7ae8b1823 100644 --- a/roles/kubernetes/master/defaults/main.yml +++ b/roles/kubernetes/master/defaults/main.yml @@ -52,7 +52,7 @@ kube_apiserver_admission_control: {%- if kube_version | version_compare('v1.9', '<') -%} GenericAdmissionWebhook {%- else -%} - ValidatingAdmissionWebhook + ValidatingAdmissionWebhook,MutatingAdmissionWebhook {%- endif -%} - ResourceQuota From 88765f62e642e0552c77b5f2cb07eb58dae89bd0 Mon Sep 17 00:00:00 2001 From: Marcelo Grebois Date: Tue, 10 Apr 2018 17:17:39 +0200 Subject: [PATCH 2/2] Updating order https://kubernetes.io/docs/admin/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use --- roles/kubernetes/master/defaults/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/kubernetes/master/defaults/main.yml b/roles/kubernetes/master/defaults/main.yml index 7ae8b1823..c2715df85 100644 --- a/roles/kubernetes/master/defaults/main.yml +++ b/roles/kubernetes/master/defaults/main.yml @@ -52,7 +52,7 @@ kube_apiserver_admission_control: {%- if kube_version | version_compare('v1.9', '<') -%} GenericAdmissionWebhook {%- else -%} - ValidatingAdmissionWebhook,MutatingAdmissionWebhook + MutatingAdmissionWebhook,ValidatingAdmissionWebhook {%- endif -%} - ResourceQuota